azure-deploy
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalyreferences/recipes/azd/sql-managed-identity.md
LOWAnomalyLOW
references/recipes/azd/sql-managed-identity.md
The code is legitimate Azure SQL managed-identity provisioning documentation, with no clear malware or covert supply-chain behavior. The main security concerns are unsafe `eval` usage and SQL injection risk from inserting unvalidated environment values into SQL identifiers and literals. Validate and allowlist service names, escape SQL identifiers and literals, and avoid `eval` by safely importing environment values. Grant `db_ddladmin` only when migrations genuinely require it.
Confidence: 98%Severity: 62%
Audit Metadata