pipelines-security-audit
Warn
Audited by Snyk on Sep 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow queries Azure DevOps REST APIs for project pipelines, service connections, and protected resources, returning data originating from Azure DevOps repositories and configurations which may contain untrusted strings.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata