microsoft / AzureStorageExplorer

Easily manage the contents of your storage account with Azure Storage Explorer. Upload, download, and manage blobs, files, queues, tables, and Cosmos DB entities. Gain easy access to manage your virtual machine disks. Work with either Azure Resource Manager or classic storage accounts, plus manage and configure cross-origin resource sharing (CORS) rules.
Creative Commons Attribution 4.0 International
365 stars 85 forks source link

Automate authentication in build system (don't use PATs) #7887

Closed JasonYeMSFT closed 1 week ago

JasonYeMSFT commented 2 months ago

To tighten the security during development, we are no longer allowed to use personal access tokens that last longer than 7 days. We should seek a more automated solution for authentication in build system so we don't have to manually refresh the credentials every week. Make sure the new solution doesn't introduce new security vulnerabilities, such as opening the door for us to forget about the automated process and leaving live credentials unattended.

JasonYeMSFT commented 1 month ago

Read this and see if it is helpful: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-security-configuration/configuration-guides/pat-rotation-tool#i-pat-rotation-package