Azure | Fix IAC-Security Vulnerabilities (AST-47969)

[AlvoBen]

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Fix IAC-Security Vulnerabilities

References

https://checkmarx.atlassian.net/browse/AST-47969

Testing

X

Checklist

• [x] I have added documentation for new/changed functionality in this PR (if applicable).
• [x] I have updated the CLI help for new/changed functionality in this PR (if applicable).
• [x] All active GitHub checks for tests, formatting, and security are passing
• [x] The correct base branch is being used

[github-actions[bot]]

Checkmarx One – Scan Summary & Details – ac8c2d1e-f72e-4202-9cf9-b6cf71a1d1a1

Policy Management Violations

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities	true

Fixed Issues

Severity	Issue	Source File / Package
	CVE-2024-4068	Npm-braces-3.0.2
	Unpinned Actions Full Length Commit SHA	/pr-label.yml: 10
	Unpinned Actions Full Length Commit SHA	/ast-scan.yml: 12
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 23
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 14
	Unpinned Actions Full Length Commit SHA	/release.yml: 101
	Unpinned Actions Full Length Commit SHA	/release.yml: 68
	Unpinned Actions Full Length Commit SHA	/release.yml: 88