azure-cli

This is an administrative Azure/GitHub OIDC setup script, not evident malware. Its primary security concern is the deliberately broad federation option (`repo:<org>/*`), default pull-request trust, and powerful Contributor and AKS Cluster Admin assignments; use narrowly scoped repository/environment trust and review permissions before execution. User-controlled values are inserted into temporary JSON without escaping, creating a configuration-injection risk for crafted inputs. Severity is medium to high if run with broad inputs or excessive permissions; no suspicious domains, hardcoded credentials, or exfiltration behavior were found.