azure-pipelines

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Azure CLI Installation]: The instructions include a command to install the Azure CLI from a Microsoft-owned URL using a pipe-to-shell pattern. This is a common method for installing official developer tools from trusted organizations and is used here to set up the necessary environment.
  • [Command-Line Interface Safety]: The included TypeScript tool facilitates interaction with Azure DevOps by wrapping shell commands. It utilizes security best practices such as disabling shell-parsing for variable arguments and implementing strict regex-based validation for all inputs (branch names, IDs, parameters) to prevent command injection.
  • [Secure File Handling]: The tool manages temporary files and downloads (logs and artifacts) within the system's temporary directory. It includes specific checks to prevent path traversal when naming downloaded files, ensuring that operations remain within intended directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 12:53 PM