search

microsoft / knack

Knack - A Python command line interface framework
https://pypi.python.org/pypi/knack
MIT License
347 stars 95 forks source link

I think Knack is pulling a version of PyYAML that has a known vulnerability. #258

Closed Quinncuatro closed 2 years ago

Quinncuatro commented 2 years ago

I'm using the Azure-CLI package in a Python project I'm building at work and when I put that project through a pipeline that includes a package scanner, it's coming up with a critical vulnerability linking back to to PyYAML/5.3.1, which is being pulled into my project through Knack/0.9.0.

Dependency Tree:

azure-cli/2.36.0
  -> azure-cli-core/2.36.0
    -> knack/0.9.0
      -> PyYAML 5.3.1

I know the CVE states versions before 5.3.1 but our scanner says that PyYAML 5.3.1 still poses a high security risk "due to an incomplete fix for CVE-2020-1747, BDSA-2020-0504."

Looking at the requirements.txt file for Knack, it looks like PyYAML is the only package listed without a specified point release. Cross referencing that with the release history of PyYAML on PyPi.org it seems like Knack was pulling a version of PyYAML (5.3.1) that's over two years old, when there have been 5.4, 5.4.1, and 6.0 versions released since then.

The latest version of Knack on PyPi.org was released on November 05, 2021 - so I'm not sure why Pip didn't grab the latest major release of PyYAML... but it seems like it is.

Any chance y'all can update Knack to use a newer version of PyYAML so that downstream Azure packages aren't being flagged for arbitrary code execution?

jiasli commented 2 years ago

@Quinncuatro, as you can see from the source code, Knack has no hard version dependency on PyYAML when installing from PyPI:

https://github.com/microsoft/knack/blob/b4d9e66b469ef7c18a1f228f803505b7f550bdc1/setup.py#L17

> python -m venv testenv
> .\testenv\Scripts\activate
> pip install knack
Collecting knack
  Using cached knack-0.9.0-py3-none-any.whl (59 kB)
Collecting pygments
  Downloading Pygments-2.12.0-py3-none-any.whl (1.1 MB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.1/1.1 MB 2.5 MB/s eta 0:00:00
Collecting pyyaml
  Using cached PyYAML-6.0-cp310-cp310-win_amd64.whl (151 kB)
Collecting argcomplete
  Using cached argcomplete-2.0.0-py2.py3-none-any.whl (37 kB)
Collecting jmespath
  Using cached jmespath-1.0.0-py3-none-any.whl (23 kB)
Collecting tabulate
  Using cached tabulate-0.8.9-py3-none-any.whl (25 kB)
Installing collected packages: tabulate, pyyaml, pygments, jmespath, argcomplete, knack
Successfully installed argcomplete-2.0.0 jmespath-1.0.0 knack-0.9.0 pygments-2.12.0 pyyaml-6.0 tabulate-0.8.9

I would recommend checking which library is installing old version of PyYAML:

> pip install pipdeptree

> pipdeptree -r -p pyyaml
pyyaml==6.0
  - knack==0.9.0 [requires: pyyaml]
jiasli commented 2 years ago

Another possibility is you are using deprecated Python 3.5 which is only supported by PyYAML 5.3.1, but not by later versions like PyYAML 5.4.

Quinncuatro commented 2 years ago

Sorry for the delay @jiasli - had a meeting with my manager and then ran some tests in my pipeline in Azure DevOps.

python -V is outputting Python 3.8.10

pip -V is outputting pip 20.0.2 from /usr/lib/python3/dist-packages/pip (python 3.8)

I was using regular pip (rather than pip3) to install the dependencies in my requirements.txt file, so I'm assuming (I don't usually develop in Python, this project was handed off to me) that the pipeline was using that Python 3.8 to install the packages.

I also ran that pipdeptree -r -p pyyaml line in my pipeline as a separate step and got this:

pyyaml==5.3.1
  - knack==0.9.0 [requires: pyyaml]
    - azure-cli-core==2.36.0 [requires: knack~=0.9.0]
      - azure-cli==2.36.0 [requires: azure-cli-core==2.36.0]

I'm going to run another test using pip3 and see if that makes a difference, but if I'm right, this is using Python 3.8.x and still saying that Knack/0.9.0 is pulling in PyYAML/5.3.1.

jiasli commented 2 years ago

pip shouldn't be the problem. Our pipeline is also on Azure DevOps and we have PyYAML 6.0 installed:

https://dev.azure.com/azure-sdk/public/_build/results?buildId=1573408&view=logs&j=4d9a7583-3a39-5165-718c-04fb813e465f&t=cca1bb5f-5cc9-5913-03be-154ad3980df4&l=275

Successfully installed MarkupSafe-2.1.1 Pygments-2.12.0 alabaster-0.7.12 argcomplete-2.0.0 astroid-2.8.6 attrs-21.4.0 azdev-0.1.36 azure-common-1.1.28 azure-core-1.24.0 azure-multiapi-storage-0.9.0 babel-2.10.1 certifi-2021.10.8 cffi-1.15.0 charset-normalizer-2.0.12 cryptography-37.0.2 distlib-0.3.4 docutils-0.18.1 execnet-1.9.0 filelock-3.7.0 flake8-4.0.1 gitdb-4.0.9 gitpython-3.1.27 idna-3.3 imagesize-1.3.0 iniconfig-1.1.1 isodate-0.6.1 isort-5.10.1 jinja2-3.1.2 jmespath-1.0.0 knack-0.9.0 lazy-object-proxy-1.7.1 mccabe-0.6.1 msrest-0.6.21 oauthlib-3.2.0 packaging-21.3 platformdirs-2.5.2 pluggy-1.0.0 py-1.11.0 pycodestyle-2.8.0 pycparser-2.21 pyflakes-2.4.0 pylint-2.11.1 pyparsing-3.0.9 pytest-7.1.2 pytest-forked-1.4.0 pytest-xdist-2.5.0 python-dateutil-2.8.2 pytz-2022.1 pyyaml-6.0 requests-2.27.1 requests-oauthlib-1.3.1 six-1.16.0 smmap-5.0.0 snowballstemmer-2.2.0 sphinx-1.6.7 sphinxcontrib-serializinghtml-1.1.5 sphinxcontrib-websupport-1.2.4 tabulate-0.8.9 toml-0.10.2 tomli-2.0.1 tox-3.25.0 typing-extensions-4.2.0 urllib3-1.26.9 virtualenv-20.14.1 wheel-0.30.0 wrapt-1.13.3

Do you mind sharing the content of your requirements.txt and the log of pip install?

Quinncuatro commented 2 years ago

Sure thing. And for the record, using pip3 returned the same dependency tree as my last post here.

Requirements.txt:

###### Requirements without Version Specifiers ######

###### Requirements with Version Specifiers ######
requests==2.27.1
opencensus==0.8.0
opencensus-context==0.1.2
opencensus-ext-azure==1.1.1
azure-cli==2.36.0

Pip Install Requirements:

2022-05-17T14:51:27.9547704Z ##[section]Starting: Install requirements
2022-05-17T14:51:27.9562259Z ==============================================================================
2022-05-17T14:51:27.9563460Z Task         : Command line
2022-05-17T14:51:27.9564042Z Description  : Run a command line script using Bash on Linux and macOS and cmd.exe on Windows
2022-05-17T14:51:27.9564704Z Version      : 2.201.1
2022-05-17T14:51:27.9565273Z Author       : Microsoft Corporation
2022-05-17T14:51:27.9565777Z Help         : https://docs.microsoft.com/azure/devops/pipelines/tasks/utility/command-line
2022-05-17T14:51:27.9566341Z ==============================================================================
2022-05-17T14:51:28.1300412Z Generating script.
2022-05-17T14:51:28.1311755Z Script contents:
2022-05-17T14:51:28.1312550Z pip install -r /home/vsts/work/1/s/requirements.txt
2022-05-17T14:51:28.1313100Z ========================== Starting Command Output ===========================
2022-05-17T14:51:28.1345168Z [command]/usr/bin/bash --noprofile --norc /home/vsts/work/_temp/c7d62be3-f417-4d64-8c36-c40899f24cc9.sh
2022-05-17T14:51:28.6022034Z Defaulting to user installation because normal site-packages is not writeable
2022-05-17T14:51:29.2460270Z Collecting requests==2.27.1
2022-05-17T14:51:29.2918693Z   Downloading requests-2.27.1-py2.py3-none-any.whl (63 kB)
2022-05-17T14:51:29.2996711Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 63.1/63.1 kB 13.8 MB/s eta 0:00:00
2022-05-17T14:51:29.3257682Z Collecting opencensus==0.8.0
2022-05-17T14:51:29.3325478Z   Downloading opencensus-0.8.0-py2.py3-none-any.whl (128 kB)
2022-05-17T14:51:29.3418381Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 128.1/128.1 kB 24.4 MB/s eta 0:00:00
2022-05-17T14:51:29.3592722Z Collecting opencensus-context==0.1.2
2022-05-17T14:51:29.3642473Z   Downloading opencensus_context-0.1.2-py2.py3-none-any.whl (4.4 kB)
2022-05-17T14:51:29.3926114Z Collecting opencensus-ext-azure==1.1.1
2022-05-17T14:51:29.3984573Z   Downloading opencensus_ext_azure-1.1.1-py2.py3-none-any.whl (42 kB)
2022-05-17T14:51:29.4047352Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 42.3/42.3 kB 9.8 MB/s eta 0:00:00
2022-05-17T14:51:29.4829046Z Collecting azure-cli==2.36.0
2022-05-17T14:51:29.5030547Z   Downloading azure_cli-2.36.0-py3-none-any.whl (2.4 MB)
2022-05-17T14:51:29.5459652Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.4/2.4 MB 63.1 MB/s eta 0:00:00
2022-05-17T14:51:29.5786618Z Requirement already satisfied: urllib3<1.27,>=1.21.1 in /usr/lib/python3/dist-packages (from requests==2.27.1->-r /home/vsts/work/1/s/requirements.txt (line 4)) (1.25.8)
2022-05-17T14:51:29.5796800Z Requirement already satisfied: certifi>=2017.4.17 in /usr/lib/python3/dist-packages (from requests==2.27.1->-r /home/vsts/work/1/s/requirements.txt (line 4)) (2019.11.28)
2022-05-17T14:51:29.5811646Z Requirement already satisfied: idna<4,>=2.5 in /usr/lib/python3/dist-packages (from requests==2.27.1->-r /home/vsts/work/1/s/requirements.txt (line 4)) (2.8)
2022-05-17T14:51:29.6153281Z Collecting charset-normalizer~=2.0.0
2022-05-17T14:51:29.6210749Z   Downloading charset_normalizer-2.0.12-py3-none-any.whl (39 kB)
2022-05-17T14:51:29.7301238Z Collecting google-api-core<3.0.0,>=1.0.0
2022-05-17T14:51:29.7356622Z   Downloading google_api_core-2.7.3-py3-none-any.whl (114 kB)
2022-05-17T14:51:29.7445461Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 114.6/114.6 kB 30.7 MB/s eta 0:00:00
2022-05-17T14:51:29.7861641Z Collecting azure-identity<2.0.0,>=1.5.0
2022-05-17T14:51:29.7905409Z   Downloading azure_identity-1.10.0-py3-none-any.whl (134 kB)
2022-05-17T14:51:29.7970532Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 134.1/134.1 kB 36.6 MB/s eta 0:00:00
2022-05-17T14:51:29.9834791Z Collecting psutil>=5.6.3
2022-05-17T14:51:29.9946948Z   Downloading psutil-5.9.0-cp38-cp38-manylinux_2_12_x86_64.manylinux2010_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (283 kB)
2022-05-17T14:51:30.0072411Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 283.8/283.8 kB 47.0 MB/s eta 0:00:00
2022-05-17T14:51:30.0488459Z Collecting azure-core<2.0.0,>=1.12.0
2022-05-17T14:51:30.0549876Z   Downloading azure_core-1.24.0-py3-none-any.whl (178 kB)
2022-05-17T14:51:30.0708067Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 178.4/178.4 kB 15.8 MB/s eta 0:00:00
2022-05-17T14:51:30.2137082Z Collecting azure-batch~=12.0.0
2022-05-17T14:51:30.2188100Z   Downloading azure_batch-12.0.0-py2.py3-none-any.whl (231 kB)
2022-05-17T14:51:30.2267436Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 231.3/231.3 kB 46.6 MB/s eta 0:00:00
2022-05-17T14:51:30.2481272Z Collecting azure-mgmt-imagebuilder~=1.0.0
2022-05-17T14:51:30.2539030Z   Downloading azure_mgmt_imagebuilder-1.0.0-py2.py3-none-any.whl (45 kB)
2022-05-17T14:51:30.2594377Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 45.9/45.9 kB 13.3 MB/s eta 0:00:00
2022-05-17T14:51:30.2806824Z Collecting azure-mgmt-applicationinsights~=1.0.0
2022-05-17T14:51:30.2898007Z   Downloading azure_mgmt_applicationinsights-1.0.0-py2.py3-none-any.whl (302 kB)
2022-05-17T14:51:30.2986773Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 303.0/303.0 kB 49.1 MB/s eta 0:00:00
2022-05-17T14:51:30.3201808Z Collecting azure-mgmt-botservice~=0.3.0
2022-05-17T14:51:30.3276119Z   Downloading azure_mgmt_botservice-0.3.0-py2.py3-none-any.whl (37 kB)
2022-05-17T14:51:30.3508945Z Collecting azure-mgmt-security==2.0.0b1
2022-05-17T14:51:30.3578075Z   Downloading azure_mgmt_security-2.0.0b1-py2.py3-none-any.whl (344 kB)
2022-05-17T14:51:30.3666796Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 344.9/344.9 kB 58.9 MB/s eta 0:00:00
2022-05-17T14:51:30.3950901Z Collecting azure-mgmt-batch~=16.1.0
2022-05-17T14:51:30.4000334Z   Downloading azure_mgmt_batch-16.1.0-py3-none-any.whl (122 kB)
2022-05-17T14:51:30.4075501Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 122.6/122.6 kB 30.4 MB/s eta 0:00:00
2022-05-17T14:51:30.4304277Z Collecting azure-mgmt-trafficmanager~=1.0.0
2022-05-17T14:51:30.4374880Z   Downloading azure_mgmt_trafficmanager-1.0.0-py3-none-any.whl (49 kB)
2022-05-17T14:51:30.4447936Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 49.3/49.3 kB 14.0 MB/s eta 0:00:00
2022-05-17T14:51:30.4615934Z Collecting azure-mgmt-apimanagement~=3.0.0
2022-05-17T14:51:30.4683265Z   Downloading azure_mgmt_apimanagement-3.0.0-py3-none-any.whl (588 kB)
2022-05-17T14:51:30.4804133Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 588.2/588.2 kB 64.3 MB/s eta 0:00:00
2022-05-17T14:51:30.5088221Z Collecting sshtunnel~=0.1.4
2022-05-17T14:51:30.5137166Z   Downloading sshtunnel-0.1.5-py2.py3-none-any.whl (23 kB)
2022-05-17T14:51:30.5455686Z Collecting colorama~=0.4.4
2022-05-17T14:51:30.5509430Z   Downloading colorama-0.4.4-py2.py3-none-any.whl (16 kB)
2022-05-17T14:51:30.5947412Z Collecting azure-mgmt-appconfiguration==2.1.0b2
2022-05-17T14:51:30.6003298Z   Downloading azure_mgmt_appconfiguration-2.1.0b2-py3-none-any.whl (61 kB)
2022-05-17T14:51:30.6060235Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 61.9/61.9 kB 18.3 MB/s eta 0:00:00
2022-05-17T14:51:30.6311896Z Collecting azure-graphrbac~=0.60.0
2022-05-17T14:51:30.6371563Z   Downloading azure_graphrbac-0.60.0-py2.py3-none-any.whl (139 kB)
2022-05-17T14:51:30.6436638Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 139.7/139.7 kB 41.9 MB/s eta 0:00:00
2022-05-17T14:51:30.6701319Z Collecting javaproperties~=0.5.1
2022-05-17T14:51:30.6752284Z   Downloading javaproperties-0.5.2-py2.py3-none-any.whl (19 kB)
2022-05-17T14:51:30.6973461Z Collecting azure-keyvault-administration==4.0.0b3
2022-05-17T14:51:30.7028177Z   Downloading azure_keyvault_administration-4.0.0b3-py2.py3-none-any.whl (77 kB)
2022-05-17T14:51:30.7088347Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 77.5/77.5 kB 24.0 MB/s eta 0:00:00
2022-05-17T14:51:30.7272530Z Collecting azure-mgmt-servicelinker==1.0.0b2
2022-05-17T14:51:30.7336359Z   Downloading azure_mgmt_servicelinker-1.0.0b2-py3-none-any.whl (32 kB)
2022-05-17T14:51:30.7565417Z Collecting azure-mgmt-policyinsights~=1.0.0
2022-05-17T14:51:30.7625650Z   Downloading azure_mgmt_policyinsights-1.0.0-py2.py3-none-any.whl (78 kB)
2022-05-17T14:51:30.7696587Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 78.7/78.7 kB 24.3 MB/s eta 0:00:00
2022-05-17T14:51:30.8032912Z Collecting azure-mgmt-cosmosdb==7.0.0b2
2022-05-17T14:51:30.8112507Z   Downloading azure_mgmt_cosmosdb-7.0.0b2-py2.py3-none-any.whl (319 kB)
2022-05-17T14:51:30.8214061Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 319.1/319.1 kB 46.5 MB/s eta 0:00:00
2022-05-17T14:51:30.8515670Z Collecting azure-mgmt-monitor~=3.0.0
2022-05-17T14:51:30.8605277Z   Downloading azure_mgmt_monitor-3.0.0-py2.py3-none-any.whl (839 kB)
2022-05-17T14:51:30.8768393Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 839.2/839.2 kB 66.5 MB/s eta 0:00:00
2022-05-17T14:51:30.9031904Z Collecting azure-mgmt-marketplaceordering==1.1.0
2022-05-17T14:51:30.9081913Z   Downloading azure_mgmt_marketplaceordering-1.1.0-py2.py3-none-any.whl (26 kB)
2022-05-17T14:51:30.9299882Z Collecting azure-mgmt-billing==6.0.0
2022-05-17T14:51:30.9384894Z   Downloading azure_mgmt_billing-6.0.0-py2.py3-none-any.whl (166 kB)
2022-05-17T14:51:30.9459705Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 167.0/167.0 kB 40.0 MB/s eta 0:00:00
2022-05-17T14:51:30.9827317Z Collecting azure-mgmt-rdbms~=10.0.0
2022-05-17T14:51:30.9905648Z   Downloading azure_mgmt_rdbms-10.0.0-py2.py3-none-any.whl (644 kB)
2022-05-17T14:51:31.0051073Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 645.0/645.0 kB 60.9 MB/s eta 0:00:00
2022-05-17T14:51:31.0333088Z Collecting azure-storage-common~=1.4
2022-05-17T14:51:31.0386796Z   Downloading azure_storage_common-1.4.2-py2.py3-none-any.whl (47 kB)
2022-05-17T14:51:31.0449486Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 47.4/47.4 kB 11.7 MB/s eta 0:00:00
2022-05-17T14:51:31.0784302Z Collecting azure-mgmt-containerinstance~=9.1.0
2022-05-17T14:51:31.0839848Z   Downloading azure_mgmt_containerinstance-9.1.0-py2.py3-none-any.whl (58 kB)
2022-05-17T14:51:31.0901765Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 58.0/58.0 kB 15.3 MB/s eta 0:00:00
2022-05-17T14:51:31.1769783Z Collecting azure-cli-core==2.36.0
2022-05-17T14:51:31.1834070Z   Downloading azure_cli_core-2.36.0-py3-none-any.whl (180 kB)
2022-05-17T14:51:31.1906770Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 180.9/180.9 kB 42.9 MB/s eta 0:00:00
2022-05-17T14:51:31.2367441Z Collecting azure-mgmt-iotcentral~=9.0.0
2022-05-17T14:51:31.2422458Z   Downloading azure_mgmt_iotcentral-9.0.0-py2.py3-none-any.whl (31 kB)
2022-05-17T14:51:31.2698252Z Collecting azure-mgmt-synapse==2.1.0b2
2022-05-17T14:51:31.2786365Z   Downloading azure_mgmt_synapse-2.1.0b2-py2.py3-none-any.whl (546 kB)
2022-05-17T14:51:31.2907800Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 546.8/546.8 kB 58.7 MB/s eta 0:00:00
2022-05-17T14:51:31.3136705Z Collecting azure-mgmt-servicefabricmanagedclusters~=1.0.0
2022-05-17T14:51:31.3190552Z   Downloading azure_mgmt_servicefabricmanagedclusters-1.0.0-py2.py3-none-any.whl (112 kB)
2022-05-17T14:51:31.3258971Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 112.5/112.5 kB 28.9 MB/s eta 0:00:00
2022-05-17T14:51:31.3467928Z Collecting azure-mgmt-signalr==1.0.0b2
2022-05-17T14:51:31.3516765Z   Downloading azure_mgmt_signalr-1.0.0b2-py2.py3-none-any.whl (71 kB)
2022-05-17T14:51:31.3584815Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 71.4/71.4 kB 19.6 MB/s eta 0:00:00
2022-05-17T14:51:31.4012677Z Collecting PyGithub~=1.38
2022-05-17T14:51:31.4064246Z   Downloading PyGithub-1.55-py3-none-any.whl (291 kB)
2022-05-17T14:51:31.4151587Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 291.7/291.7 kB 50.4 MB/s eta 0:00:00
2022-05-17T14:51:31.4445822Z Collecting azure-mgmt-eventgrid==9.0.0
2022-05-17T14:51:31.4505549Z   Downloading azure_mgmt_eventgrid-9.0.0-py2.py3-none-any.whl (178 kB)
2022-05-17T14:51:31.4581102Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 178.4/178.4 kB 41.5 MB/s eta 0:00:00
2022-05-17T14:51:31.4798910Z Collecting azure-mgmt-recoveryservices~=2.0.0
2022-05-17T14:51:31.4875762Z   Downloading azure_mgmt_recoveryservices-2.0.0-py2.py3-none-any.whl (79 kB)
2022-05-17T14:51:31.4937235Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 79.7/79.7 kB 22.0 MB/s eta 0:00:00
2022-05-17T14:51:31.5162709Z Collecting azure-mgmt-consumption~=2.0
2022-05-17T14:51:31.5218167Z   Downloading azure_mgmt_consumption-2.0.0-py2.py3-none-any.whl (46 kB)
2022-05-17T14:51:31.5277840Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 46.3/46.3 kB 13.2 MB/s eta 0:00:00
2022-05-17T14:51:31.5483621Z Collecting azure-mgmt-redhatopenshift==1.0.0
2022-05-17T14:51:31.5555918Z   Downloading azure_mgmt_redhatopenshift-1.0.0-py2.py3-none-any.whl (41 kB)
2022-05-17T14:51:31.5620148Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 41.1/41.1 kB 10.1 MB/s eta 0:00:00
2022-05-17T14:51:31.5830739Z Collecting azure-mgmt-iothubprovisioningservices==1.1.0
2022-05-17T14:51:31.5903069Z   Downloading azure_mgmt_iothubprovisioningservices-1.1.0-py3-none-any.whl (52 kB)
2022-05-17T14:51:31.5971867Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 52.5/52.5 kB 13.5 MB/s eta 0:00:00
2022-05-17T14:51:31.6246845Z Collecting azure-mgmt-hdinsight~=9.0.0
2022-05-17T14:51:31.6301152Z   Downloading azure_mgmt_hdinsight-9.0.0-py2.py3-none-any.whl (125 kB)
2022-05-17T14:51:31.6369975Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 125.7/125.7 kB 32.4 MB/s eta 0:00:00
2022-05-17T14:51:31.6555325Z Collecting azure-mgmt-extendedlocation==1.0.0b2
2022-05-17T14:51:31.6612502Z   Downloading azure_mgmt_extendedlocation-1.0.0b2-py2.py3-none-any.whl (37 kB)
2022-05-17T14:51:31.6806314Z Collecting azure-loganalytics~=0.1.0
2022-05-17T14:51:31.6853174Z   Downloading azure_loganalytics-0.1.1-py2.py3-none-any.whl (16 kB)
2022-05-17T14:51:31.7248414Z Collecting websocket-client~=1.3.1
2022-05-17T14:51:31.7327146Z   Downloading websocket_client-1.3.2-py3-none-any.whl (54 kB)
2022-05-17T14:51:31.7385883Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 54.3/54.3 kB 15.5 MB/s eta 0:00:00
2022-05-17T14:51:31.7584755Z Collecting azure-mgmt-servicefabric~=1.0.0
2022-05-17T14:51:31.7648900Z   Downloading azure_mgmt_servicefabric-1.0.0-py2.py3-none-any.whl (139 kB)
2022-05-17T14:51:31.7718770Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 139.6/139.6 kB 35.3 MB/s eta 0:00:00
2022-05-17T14:51:31.7919049Z Collecting azure-mgmt-deploymentmanager~=0.2.0
2022-05-17T14:51:31.7974979Z   Downloading azure_mgmt_deploymentmanager-0.2.0-py2.py3-none-any.whl (41 kB)
2022-05-17T14:51:31.8030424Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 41.4/41.4 kB 11.7 MB/s eta 0:00:00
2022-05-17T14:51:31.8053865Z Requirement already satisfied: six>=1.10.0 in /usr/lib/python3/dist-packages (from azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (1.14.0)
2022-05-17T14:51:31.8220761Z Collecting azure-synapse-managedprivateendpoints~=0.3.0
2022-05-17T14:51:31.8292739Z   Downloading azure_synapse_managedprivateendpoints-0.3.0-py2.py3-none-any.whl (19 kB)
2022-05-17T14:51:31.8519025Z Collecting azure-data-tables==12.2.0
2022-05-17T14:51:31.8577811Z   Downloading azure_data_tables-12.2.0-py2.py3-none-any.whl (108 kB)
2022-05-17T14:51:31.8641490Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 108.1/108.1 kB 30.0 MB/s eta 0:00:00
2022-05-17T14:51:31.8676930Z Requirement already satisfied: chardet~=3.0.4 in /usr/lib/python3/dist-packages (from azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (3.0.4)
2022-05-17T14:51:31.8880653Z Collecting azure-mgmt-devtestlabs~=4.0
2022-05-17T14:51:31.8952587Z   Downloading azure_mgmt_devtestlabs-4.0.0-py2.py3-none-any.whl (137 kB)
2022-05-17T14:51:31.9026781Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 137.0/137.0 kB 35.4 MB/s eta 0:00:00
2022-05-17T14:51:31.9227832Z Collecting azure-mgmt-maps~=2.0.0
2022-05-17T14:51:31.9279007Z   Downloading azure_mgmt_maps-2.0.0-py2.py3-none-any.whl (38 kB)
2022-05-17T14:51:31.9568346Z Collecting azure-cosmos>=3.0.2,~=3.0
2022-05-17T14:51:31.9658818Z   Downloading azure_cosmos-3.2.0-py2.py3-none-any.whl (106 kB)
2022-05-17T14:51:31.9727993Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 106.6/106.6 kB 27.3 MB/s eta 0:00:00
2022-05-17T14:51:32.0252297Z Collecting fabric~=2.4
2022-05-17T14:51:32.0304748Z   Downloading fabric-2.7.0-py2.py3-none-any.whl (55 kB)
2022-05-17T14:51:32.0365046Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 55.3/55.3 kB 16.8 MB/s eta 0:00:00
2022-05-17T14:51:32.0701918Z Collecting azure-mgmt-cdn==12.0.0
2022-05-17T14:51:32.0812126Z   Downloading azure_mgmt_cdn-12.0.0-py3-none-any.whl (239 kB)
2022-05-17T14:51:32.0892160Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 239.4/239.4 kB 46.8 MB/s eta 0:00:00
2022-05-17T14:51:32.1282066Z Collecting azure-mgmt-datamigration~=10.0.0
2022-05-17T14:51:32.1345670Z   Downloading azure_mgmt_datamigration-10.0.0-py2.py3-none-any.whl (174 kB)
2022-05-17T14:51:32.1413995Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 174.5/174.5 kB 44.7 MB/s eta 0:00:00
2022-05-17T14:51:32.1625186Z Collecting azure-mgmt-privatedns~=1.0.0
2022-05-17T14:51:32.1679497Z   Downloading azure_mgmt_privatedns-1.0.0-py2.py3-none-any.whl (43 kB)
2022-05-17T14:51:32.1728026Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 44.0/44.0 kB 15.6 MB/s eta 0:00:00
2022-05-17T14:51:32.1975058Z Collecting azure-mgmt-cognitiveservices~=13.1.0
2022-05-17T14:51:32.2020343Z   Downloading azure_mgmt_cognitiveservices-13.1.0-py3-none-any.whl (95 kB)
2022-05-17T14:51:32.2075374Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 95.0/95.0 kB 27.9 MB/s eta 0:00:00
2022-05-17T14:51:32.2564081Z Collecting azure-mgmt-resource==20.0.0
2022-05-17T14:51:32.2726922Z   Downloading azure_mgmt_resource-20.0.0-py2.py3-none-any.whl (2.3 MB)
2022-05-17T14:51:32.3034429Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 82.4 MB/s eta 0:00:00
2022-05-17T14:51:32.3414223Z Collecting azure-synapse-artifacts~=0.12.0
2022-05-17T14:51:32.3486258Z   Downloading azure_synapse_artifacts-0.12.0-py3-none-any.whl (421 kB)
2022-05-17T14:51:32.3577484Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 421.0/421.0 kB 67.0 MB/s eta 0:00:00
2022-05-17T14:51:32.3836092Z Collecting azure-mgmt-loganalytics==13.0.0b4
2022-05-17T14:51:32.3907251Z   Downloading azure_mgmt_loganalytics-13.0.0b4-py3-none-any.whl (162 kB)
2022-05-17T14:51:32.3969104Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 162.6/162.6 kB 42.6 MB/s eta 0:00:00
2022-05-17T14:51:32.4342854Z Collecting azure-mgmt-sql==4.0.0b1
2022-05-17T14:51:32.4443179Z   Downloading azure_mgmt_sql-4.0.0b1-py2.py3-none-any.whl (916 kB)
2022-05-17T14:51:32.4584935Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 916.5/916.5 kB 80.4 MB/s eta 0:00:00
2022-05-17T14:51:32.4844281Z Collecting azure-appconfiguration~=1.1.1
2022-05-17T14:51:32.4898360Z   Downloading azure_appconfiguration-1.1.1-py2.py3-none-any.whl (37 kB)
2022-05-17T14:51:32.5139631Z Collecting azure-mgmt-datalake-analytics~=0.2.1
2022-05-17T14:51:32.5199389Z   Downloading azure_mgmt_datalake_analytics-0.2.1-py2.py3-none-any.whl (146 kB)
2022-05-17T14:51:32.5264535Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 146.6/146.6 kB 38.5 MB/s eta 0:00:00
2022-05-17T14:51:32.5458372Z Collecting azure-synapse-spark~=0.2.0
2022-05-17T14:51:32.5513956Z   Downloading azure_synapse_spark-0.2.0-py2.py3-none-any.whl (29 kB)
2022-05-17T14:51:32.5838537Z Collecting semver==2.13.0
2022-05-17T14:51:32.5909439Z   Downloading semver-2.13.0-py2.py3-none-any.whl (12 kB)
2022-05-17T14:51:32.6119362Z Collecting azure-mgmt-batchai==7.0.0b1
2022-05-17T14:51:32.6170759Z   Downloading azure_mgmt_batchai-7.0.0b1-py2.py3-none-any.whl (99 kB)
2022-05-17T14:51:32.6235159Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 99.1/99.1 kB 26.8 MB/s eta 0:00:00
2022-05-17T14:51:32.6508038Z Collecting azure-mgmt-keyvault==9.3.0
2022-05-17T14:51:32.6580529Z   Downloading azure_mgmt_keyvault-9.3.0-py2.py3-none-any.whl (412 kB)
2022-05-17T14:51:32.6682582Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 412.4/412.4 kB 60.7 MB/s eta 0:00:00
2022-05-17T14:51:32.6904264Z Collecting azure-mgmt-search~=8.0
2022-05-17T14:51:32.6974333Z   Downloading azure_mgmt_search-8.0.0-py2.py3-none-any.whl (71 kB)
2022-05-17T14:51:32.7037800Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 71.7/71.7 kB 19.5 MB/s eta 0:00:00
2022-05-17T14:51:32.7236291Z Collecting azure-mgmt-advisor==9.0.0
2022-05-17T14:51:32.7285179Z   Downloading azure_mgmt_advisor-9.0.0-py2.py3-none-any.whl (46 kB)
2022-05-17T14:51:32.7341014Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 46.9/46.9 kB 12.9 MB/s eta 0:00:00
2022-05-17T14:51:32.7554521Z Collecting azure-mgmt-reservations==0.6.0
2022-05-17T14:51:32.7631552Z   Downloading azure_mgmt_reservations-0.6.0-py2.py3-none-any.whl (33 kB)
2022-05-17T14:51:32.7891032Z Collecting azure-mgmt-eventhub~=9.1.0
2022-05-17T14:51:32.7966461Z   Downloading azure_mgmt_eventhub-9.1.0-py2.py3-none-any.whl (383 kB)
2022-05-17T14:51:32.8061480Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 383.5/383.5 kB 65.5 MB/s eta 0:00:00
2022-05-17T14:51:32.8518524Z Collecting azure-mgmt-network~=19.3.0
2022-05-17T14:51:32.8593691Z   Downloading azure_mgmt_network-19.3.0-py2.py3-none-any.whl (21.1 MB)
2022-05-17T14:51:33.1171637Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 21.1/21.1 MB 62.3 MB/s eta 0:00:00
2022-05-17T14:51:33.2655626Z Collecting azure-mgmt-authorization~=0.61.0
2022-05-17T14:51:33.2729601Z   Downloading azure_mgmt_authorization-0.61.0-py2.py3-none-any.whl (94 kB)
2022-05-17T14:51:33.2801380Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 94.5/94.5 kB 25.2 MB/s eta 0:00:00
2022-05-17T14:51:33.3097679Z Collecting azure-mgmt-netapp~=7.0.0
2022-05-17T14:51:33.3169607Z   Downloading azure_mgmt_netapp-7.0.0-py3-none-any.whl (141 kB)
2022-05-17T14:51:33.3242387Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 142.0/142.0 kB 34.7 MB/s eta 0:00:00
2022-05-17T14:51:33.3583227Z Collecting azure-mgmt-containerregistry==8.2.0
2022-05-17T14:51:33.3671448Z   Downloading azure_mgmt_containerregistry-8.2.0-py2.py3-none-any.whl (928 kB)
2022-05-17T14:51:33.3847495Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 928.0/928.0 kB 68.0 MB/s eta 0:00:00
2022-05-17T14:51:33.4308054Z Collecting azure-mgmt-containerservice~=19.0.0
2022-05-17T14:51:33.4437401Z   Downloading azure_mgmt_containerservice-19.0.0-py3-none-any.whl (2.7 MB)
2022-05-17T14:51:33.4849922Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.7/2.7 MB 72.8 MB/s eta 0:00:00
2022-05-17T14:51:33.5277860Z Collecting azure-keyvault-keys==4.5.1
2022-05-17T14:51:33.5344166Z   Downloading azure_keyvault_keys-4.5.1-py3-none-any.whl (375 kB)
2022-05-17T14:51:33.5449355Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 375.7/375.7 kB 56.4 MB/s eta 0:00:00
2022-05-17T14:51:33.5782202Z Collecting azure-mgmt-recoveryservicesbackup~=4.1.1
2022-05-17T14:51:33.5854497Z   Downloading azure_mgmt_recoveryservicesbackup-4.1.1-py3-none-any.whl (474 kB)
2022-05-17T14:51:33.5963980Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 474.9/474.9 kB 63.4 MB/s eta 0:00:00
2022-05-17T14:51:33.6187292Z Collecting antlr4-python3-runtime~=4.7.2
2022-05-17T14:51:33.6315091Z   Downloading antlr4-python3-runtime-4.7.2.tar.gz (112 kB)
2022-05-17T14:51:33.6383452Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 112.3/112.3 kB 29.7 MB/s eta 0:00:00
2022-05-17T14:51:33.6613970Z   Preparing metadata (setup.py): started
2022-05-17T14:51:34.1262292Z   Preparing metadata (setup.py): finished with status 'done'
2022-05-17T14:51:34.1497337Z Collecting azure-mgmt-databoxedge~=1.0.0
2022-05-17T14:51:34.1586221Z   Downloading azure_mgmt_databoxedge-1.0.0-py2.py3-none-any.whl (1.3 MB)
2022-05-17T14:51:34.1807937Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.3/1.3 MB 70.1 MB/s eta 0:00:00
2022-05-17T14:51:34.2423312Z Collecting PyNaCl~=1.4.0
2022-05-17T14:51:34.2480283Z   Downloading PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl (961 kB)
2022-05-17T14:51:34.2644522Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 961.1/961.1 kB 77.0 MB/s eta 0:00:00
2022-05-17T14:51:34.2917416Z Collecting azure-mgmt-managedservices~=1.0
2022-05-17T14:51:34.2972504Z   Downloading azure_mgmt_managedservices-1.0.0-py2.py3-none-any.whl (38 kB)
2022-05-17T14:51:34.3204274Z Collecting azure-synapse-accesscontrol~=0.5.0
2022-05-17T14:51:34.3259225Z   Downloading azure_synapse_accesscontrol-0.5.0-py2.py3-none-any.whl (30 kB)
2022-05-17T14:51:34.3520631Z Collecting azure-mgmt-redis~=13.1.0
2022-05-17T14:51:34.3568641Z   Downloading azure_mgmt_redis-13.1.0-py2.py3-none-any.whl (87 kB)
2022-05-17T14:51:34.3627904Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 88.0/88.0 kB 22.9 MB/s eta 0:00:00
2022-05-17T14:51:34.3654108Z Requirement already satisfied: packaging<22.0,>=20.9 in /usr/local/lib/python3.8/dist-packages (from azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (21.3)
2022-05-17T14:51:34.3823263Z Collecting azure-mgmt-managementgroups~=1.0.0
2022-05-17T14:51:34.3884804Z   Downloading azure_mgmt_managementgroups-1.0.0-py2.py3-none-any.whl (58 kB)
2022-05-17T14:51:34.3945100Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 58.1/58.1 kB 15.9 MB/s eta 0:00:00
2022-05-17T14:51:34.4410913Z Collecting azure-mgmt-compute~=26.1.0
2022-05-17T14:51:34.4639044Z   Downloading azure_mgmt_compute-26.1.0-py3-none-any.whl (4.8 MB)
2022-05-17T14:51:34.5294231Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.8/4.8 MB 78.8 MB/s eta 0:00:00
2022-05-17T14:51:34.5837800Z Collecting azure-mgmt-sqlvirtualmachine==1.0.0b2
2022-05-17T14:51:34.5889853Z   Downloading azure_mgmt_sqlvirtualmachine-1.0.0b2-py3-none-any.whl (57 kB)
2022-05-17T14:51:34.5961812Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 57.9/57.9 kB 13.4 MB/s eta 0:00:00
2022-05-17T14:51:34.6247022Z Collecting azure-multiapi-storage~=0.8.0
2022-05-17T14:51:34.6303832Z   Downloading azure_multiapi_storage-0.8.0-py2.py3-none-any.whl (6.2 MB)
2022-05-17T14:51:34.7114290Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 6.2/6.2 MB 81.0 MB/s eta 0:00:00
2022-05-17T14:51:34.7724786Z Collecting azure-mgmt-iothub==2.2.0
2022-05-17T14:51:34.7805767Z   Downloading azure_mgmt_iothub-2.2.0-py3-none-any.whl (839 kB)
2022-05-17T14:51:34.7958840Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 839.9/839.9 kB 71.1 MB/s eta 0:00:00
2022-05-17T14:51:34.8044901Z Requirement already satisfied: distro in /usr/lib/python3/dist-packages (from azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (1.4.0)
2022-05-17T14:51:34.8285254Z Collecting azure-mgmt-kusto~=0.3.0
2022-05-17T14:51:34.8344433Z   Downloading azure_mgmt_kusto-0.3.0-py2.py3-none-any.whl (73 kB)
2022-05-17T14:51:34.8417891Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 73.9/73.9 kB 14.0 MB/s eta 0:00:00
2022-05-17T14:51:34.8781613Z Collecting azure-datalake-store~=0.0.49
2022-05-17T14:51:34.8834444Z   Downloading azure_datalake_store-0.0.52-py2.py3-none-any.whl (61 kB)
2022-05-17T14:51:34.8902902Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 61.7/61.7 kB 16.8 MB/s eta 0:00:00
2022-05-17T14:51:34.9101113Z Collecting azure-mgmt-relay~=0.1.0
2022-05-17T14:51:34.9151648Z   Downloading azure_mgmt_relay-0.1.0-py2.py3-none-any.whl (36 kB)
2022-05-17T14:51:34.9398610Z Collecting xmltodict~=0.12
2022-05-17T14:51:34.9454117Z   Downloading xmltodict-0.13.0-py2.py3-none-any.whl (10.0 kB)
2022-05-17T14:51:34.9719462Z Collecting azure-mgmt-dns~=8.0.0
2022-05-17T14:51:34.9773035Z   Downloading azure_mgmt_dns-8.0.0-py2.py3-none-any.whl (118 kB)
2022-05-17T14:51:34.9845984Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 118.9/118.9 kB 31.6 MB/s eta 0:00:00
2022-05-17T14:51:35.0090729Z Collecting azure-mgmt-datalake-store~=0.5.0
2022-05-17T14:51:35.0141895Z   Downloading azure_mgmt_datalake_store-0.5.0-py2.py3-none-any.whl (88 kB)
2022-05-17T14:51:35.0204571Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 88.7/88.7 kB 25.3 MB/s eta 0:00:00
2022-05-17T14:51:35.0456764Z Collecting azure-mgmt-servicebus~=7.1.0
2022-05-17T14:51:35.0540432Z   Downloading azure_mgmt_servicebus-7.1.0-py2.py3-none-any.whl (539 kB)
2022-05-17T14:51:35.0670414Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 539.2/539.2 kB 56.6 MB/s eta 0:00:00
2022-05-17T14:51:35.1089756Z Collecting azure-mgmt-web~=6.1.0
2022-05-17T14:51:35.1252762Z   Downloading azure_mgmt_web-6.1.0-py3-none-any.whl (3.9 MB)
2022-05-17T14:51:35.1737895Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 3.9/3.9 MB 85.8 MB/s eta 0:00:00
2022-05-17T14:51:35.2322481Z Collecting azure-mgmt-storage~=20.0.0
2022-05-17T14:51:35.2439097Z   Downloading azure_mgmt_storage-20.0.0-py3-none-any.whl (2.0 MB)
2022-05-17T14:51:35.2725413Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.0/2.0 MB 78.2 MB/s eta 0:00:00
2022-05-17T14:51:35.3091354Z Collecting azure-mgmt-msi~=6.0.0
2022-05-17T14:51:35.3140366Z   Downloading azure_mgmt_msi-6.0.1-py3-none-any.whl (73 kB)
2022-05-17T14:51:35.3206635Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 73.1/73.1 kB 18.0 MB/s eta 0:00:00
2022-05-17T14:51:35.3401186Z Collecting jsondiff~=1.3.0
2022-05-17T14:51:35.3454593Z   Downloading jsondiff-1.3.1.tar.gz (6.5 kB)
2022-05-17T14:51:35.3529899Z   Preparing metadata (setup.py): started
2022-05-17T14:51:35.6266936Z   Preparing metadata (setup.py): finished with status 'done'
2022-05-17T14:51:35.6562973Z Collecting scp~=0.13.2
2022-05-17T14:51:35.6616957Z   Downloading scp-0.13.6-py2.py3-none-any.whl (8.2 kB)
2022-05-17T14:51:35.6911698Z Collecting azure-keyvault~=1.1.0
2022-05-17T14:51:35.7176971Z   Downloading azure_keyvault-1.1.0-py2.py3-none-any.whl (352 kB)
2022-05-17T14:51:35.7278871Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 352.3/352.3 kB 53.4 MB/s eta 0:00:00
2022-05-17T14:51:35.7582490Z Collecting azure-mgmt-media~=9.0
2022-05-17T14:51:35.7674692Z   Downloading azure_mgmt_media-9.0.0-py3-none-any.whl (211 kB)
2022-05-17T14:51:35.7750858Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 211.1/211.1 kB 45.9 MB/s eta 0:00:00
2022-05-17T14:51:35.8215593Z Collecting azure-cli-telemetry==1.0.6.*
2022-05-17T14:51:35.8294243Z   Downloading azure_cli_telemetry-1.0.6-py3-none-any.whl (10 kB)
2022-05-17T14:51:35.8551716Z Collecting azure-mgmt-core<2,>=1.2.0
2022-05-17T14:51:35.8614586Z   Downloading azure_mgmt_core-1.3.0-py2.py3-none-any.whl (25 kB)
2022-05-17T14:51:35.9316502Z Collecting paramiko<3.0.0,>=2.0.8
2022-05-17T14:51:35.9371688Z   Downloading paramiko-2.11.0-py2.py3-none-any.whl (212 kB)
2022-05-17T14:51:35.9453280Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 212.9/212.9 kB 46.3 MB/s eta 0:00:00
2022-05-17T14:51:36.0007628Z Collecting msal-extensions~=1.0.0
2022-05-17T14:51:36.0075711Z   Downloading msal_extensions-1.0.0-py2.py3-none-any.whl (19 kB)
2022-05-17T14:51:36.0505835Z Collecting msrestazure~=0.6.4
2022-05-17T14:51:36.0556657Z   Downloading msrestazure-0.6.4-py2.py3-none-any.whl (40 kB)
2022-05-17T14:51:36.0614159Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 40.5/40.5 kB 12.2 MB/s eta 0:00:00
2022-05-17T14:51:36.0952524Z Collecting PyJWT>=2.1.0
2022-05-17T14:51:36.1007994Z   Downloading PyJWT-2.4.0-py3-none-any.whl (18 kB)
2022-05-17T14:51:36.1330810Z Collecting msal<2.0.0,>=1.17.0
2022-05-17T14:51:36.1398459Z   Downloading msal-1.17.0-py2.py3-none-any.whl (79 kB)
2022-05-17T14:51:36.1462816Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 79.3/79.3 kB 22.7 MB/s eta 0:00:00
2022-05-17T14:51:36.1773795Z Collecting knack~=0.9.0
2022-05-17T14:51:36.1827695Z   Downloading knack-0.9.0-py3-none-any.whl (59 kB)
2022-05-17T14:51:36.1896037Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 59.8/59.8 kB 14.8 MB/s eta 0:00:00
2022-05-17T14:51:36.2190171Z Collecting pkginfo>=1.5.0.1
2022-05-17T14:51:36.2262889Z   Downloading pkginfo-1.8.2-py2.py3-none-any.whl (26 kB)
2022-05-17T14:51:36.2545447Z Collecting jmespath
2022-05-17T14:51:36.2601112Z   Downloading jmespath-1.0.0-py3-none-any.whl (23 kB)
2022-05-17T14:51:36.2655577Z Requirement already satisfied: pyopenssl>=17.1.0 in /usr/lib/python3/dist-packages (from azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (19.0.0)
2022-05-17T14:51:36.2669552Z Requirement already satisfied: requests[socks] in /usr/lib/python3/dist-packages (from azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (2.22.0)
2022-05-17T14:51:36.3270867Z Collecting humanfriendly~=10.0
2022-05-17T14:51:36.3326010Z   Downloading humanfriendly-10.0-py2.py3-none-any.whl (86 kB)
2022-05-17T14:51:36.3387369Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 86.8/86.8 kB 25.5 MB/s eta 0:00:00
2022-05-17T14:51:36.3837492Z Collecting argcomplete~=1.8
2022-05-17T14:51:36.3899323Z   Downloading argcomplete-1.12.3-py2.py3-none-any.whl (38 kB)
2022-05-17T14:51:36.3949992Z Requirement already satisfied: cryptography in /usr/lib/python3/dist-packages (from azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (2.8)
2022-05-17T14:51:36.4534112Z Collecting msrest>=0.6.21
2022-05-17T14:51:36.4588093Z   Downloading msrest-0.6.21-py2.py3-none-any.whl (85 kB)
2022-05-17T14:51:36.4654922Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 85.2/85.2 kB 21.4 MB/s eta 0:00:00
2022-05-17T14:51:36.5173025Z Collecting azure-common~=1.1
2022-05-17T14:51:36.5221909Z   Downloading azure_common-1.1.28-py2.py3-none-any.whl (14 kB)
2022-05-17T14:51:36.7687470Z Collecting applicationinsights<0.12,>=0.11.1
2022-05-17T14:51:36.7796415Z   Downloading applicationinsights-0.11.10-py2.py3-none-any.whl (55 kB)
2022-05-17T14:51:36.7849225Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 55.1/55.1 kB 14.2 MB/s eta 0:00:00
2022-05-17T14:51:36.8152034Z Collecting portalocker~=1.2
2022-05-17T14:51:36.8207209Z   Downloading portalocker-1.7.1-py2.py3-none-any.whl (10 kB)
2022-05-17T14:51:36.9012484Z Collecting typing-extensions>=4.0.1
2022-05-17T14:51:36.9067902Z   Downloading typing_extensions-4.2.0-py3-none-any.whl (24 kB)
2022-05-17T14:51:37.2178688Z Collecting cffi
2022-05-17T14:51:37.2261849Z   Downloading cffi-1.15.0-cp38-cp38-manylinux_2_12_x86_64.manylinux2010_x86_64.whl (446 kB)
2022-05-17T14:51:37.2372744Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 446.7/446.7 kB 58.6 MB/s eta 0:00:00
2022-05-17T14:51:37.2692066Z Collecting adal>=0.4.2
2022-05-17T14:51:37.2747228Z   Downloading adal-1.2.7-py2.py3-none-any.whl (55 kB)
2022-05-17T14:51:37.2814664Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 55.5/55.5 kB 13.0 MB/s eta 0:00:00
2022-05-17T14:51:37.3478670Z Collecting azure-nspkg>=2.0.0
2022-05-17T14:51:37.3526251Z   Downloading azure_nspkg-3.0.2-py3-none-any.whl (1.5 kB)
2022-05-17T14:51:37.4736402Z Collecting azure-mgmt-nspkg>=2.0.0
2022-05-17T14:51:37.4779678Z   Downloading azure_mgmt_nspkg-3.0.2-py3-none-any.whl (1.6 kB)
2022-05-17T14:51:37.5435574Z Collecting azure-mgmt-datalake-nspkg>=2.0.0
2022-05-17T14:51:37.5482903Z   Downloading azure_mgmt_datalake_nspkg-3.0.1-py3-none-any.whl (1.7 kB)
2022-05-17T14:51:38.0639261Z Collecting python-dateutil
2022-05-17T14:51:38.0691097Z   Downloading python_dateutil-2.8.2-py2.py3-none-any.whl (247 kB)
2022-05-17T14:51:38.0807115Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 247.7/247.7 kB 46.0 MB/s eta 0:00:00
2022-05-17T14:51:38.3312928Z Collecting invoke<2.0,>=1.3
2022-05-17T14:51:38.3509429Z   Downloading invoke-1.7.1-py3-none-any.whl (215 kB)
2022-05-17T14:51:38.3662083Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 215.4/215.4 kB 17.4 MB/s eta 0:00:00
2022-05-17T14:51:38.3974514Z Collecting pathlib2
2022-05-17T14:51:38.4028925Z   Downloading pathlib2-2.3.7.post1-py2.py3-none-any.whl (18 kB)
2022-05-17T14:51:38.5648485Z Collecting google-auth<3.0dev,>=1.25.0
2022-05-17T14:51:38.5702798Z   Downloading google_auth-2.6.6-py2.py3-none-any.whl (156 kB)
2022-05-17T14:51:38.5774959Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 156.7/156.7 kB 35.5 MB/s eta 0:00:00
2022-05-17T14:51:38.6075420Z Collecting googleapis-common-protos<2.0dev,>=1.52.0
2022-05-17T14:51:38.6133290Z   Downloading googleapis_common_protos-1.56.1-py2.py3-none-any.whl (211 kB)
2022-05-17T14:51:38.6209313Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 211.7/211.7 kB 42.3 MB/s eta 0:00:00
2022-05-17T14:51:38.9351793Z Collecting protobuf>=3.12.0
2022-05-17T14:51:38.9639475Z   Downloading protobuf-3.20.1-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl (1.0 MB)
2022-05-17T14:51:38.9810851Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.0/1.0 MB 74.1 MB/s eta 0:00:00
2022-05-17T14:51:39.0395734Z Requirement already satisfied: pyparsing!=3.0.5,>=2.0.2 in /usr/local/lib/python3.8/dist-packages (from packaging<22.0,>=20.9->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (3.0.8)
2022-05-17T14:51:39.1288735Z Collecting deprecated
2022-05-17T14:51:39.1348158Z   Downloading Deprecated-1.2.13-py2.py3-none-any.whl (9.6 kB)
2022-05-17T14:51:39.5171412Z Collecting pycparser
2022-05-17T14:51:39.5242276Z   Downloading pycparser-2.21-py2.py3-none-any.whl (118 kB)
2022-05-17T14:51:39.5313997Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 118.7/118.7 kB 29.5 MB/s eta 0:00:00
2022-05-17T14:51:39.5893502Z Requirement already satisfied: pyasn1-modules>=0.2.1 in /usr/lib/python3/dist-packages (from google-auth<3.0dev,>=1.25.0->google-api-core<3.0.0,>=1.0.0->opencensus==0.8.0->-r /home/vsts/work/1/s/requirements.txt (line 5)) (0.2.1)
2022-05-17T14:51:39.6222797Z Collecting cachetools<6.0,>=2.0.0
2022-05-17T14:51:39.6282142Z   Downloading cachetools-5.1.0-py3-none-any.whl (9.2 kB)
2022-05-17T14:51:39.6635432Z Collecting rsa<5,>=3.1.4
2022-05-17T14:51:39.6684495Z   Downloading rsa-4.8-py3-none-any.whl (39 kB)
2022-05-17T14:51:39.8147426Z Collecting tabulate
2022-05-17T14:51:39.8197706Z   Downloading tabulate-0.8.9-py3-none-any.whl (25 kB)
2022-05-17T14:51:39.8244428Z Requirement already satisfied: pygments in /usr/lib/python3/dist-packages (from knack~=0.9.0->azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (2.3.1)
2022-05-17T14:51:39.8250199Z Requirement already satisfied: pyyaml in /usr/lib/python3/dist-packages (from knack~=0.9.0->azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (5.3.1)
2022-05-17T14:51:39.8518771Z Requirement already satisfied: PyJWT[crypto]<3,>=1.0.0 in /usr/lib/python3/dist-packages (from msal<2.0.0,>=1.17.0->azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (1.7.1)
2022-05-17T14:51:39.9453189Z Collecting requests-oauthlib>=0.5.0
2022-05-17T14:51:39.9515715Z   Downloading requests_oauthlib-1.3.1-py2.py3-none-any.whl (23 kB)
2022-05-17T14:51:39.9901081Z Collecting isodate>=0.6.0
2022-05-17T14:51:39.9948438Z   Downloading isodate-0.6.1-py2.py3-none-any.whl (41 kB)
2022-05-17T14:51:40.0005120Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 41.7/41.7 kB 13.3 MB/s eta 0:00:00
2022-05-17T14:51:40.1567544Z Collecting bcrypt>=3.1.3
2022-05-17T14:51:40.1623394Z   Downloading bcrypt-3.2.2-cp36-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl (62 kB)
2022-05-17T14:51:40.1683310Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 62.3/62.3 kB 16.9 MB/s eta 0:00:00
2022-05-17T14:51:40.5734128Z Collecting wrapt<2,>=1.10
2022-05-17T14:51:40.5820716Z   Downloading wrapt-1.14.1-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (81 kB)
2022-05-17T14:51:40.5891688Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 81.0/81.0 kB 20.0 MB/s eta 0:00:00
2022-05-17T14:51:40.7214314Z Collecting PySocks!=1.5.7,>=1.5.6
2022-05-17T14:51:40.7266979Z   Downloading PySocks-1.7.1-py3-none-any.whl (16 kB)
2022-05-17T14:51:41.3185154Z Collecting cryptography
2022-05-17T14:51:41.3336182Z   Downloading cryptography-37.0.2-cp36-abi3-manylinux_2_24_x86_64.whl (4.0 MB)
2022-05-17T14:51:41.3877511Z      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.0/4.0 MB 79.4 MB/s eta 0:00:00
2022-05-17T14:51:41.5317417Z Requirement already satisfied: oauthlib>=3.0.0 in /usr/lib/python3/dist-packages (from requests-oauthlib>=0.5.0->msrest>=0.6.21->azure-data-tables==12.2.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (3.1.0)
2022-05-17T14:51:41.5712606Z Requirement already satisfied: pyasn1>=0.1.3 in /usr/lib/python3/dist-packages (from rsa<5,>=3.1.4->google-auth<3.0dev,>=1.25.0->google-api-core<3.0.0,>=1.0.0->opencensus==0.8.0->-r /home/vsts/work/1/s/requirements.txt (line 5)) (0.4.2)
2022-05-17T14:51:41.8287905Z Building wheels for collected packages: antlr4-python3-runtime, jsondiff
2022-05-17T14:51:41.8294602Z   Building wheel for antlr4-python3-runtime (setup.py): started
2022-05-17T14:51:42.2076927Z   Building wheel for antlr4-python3-runtime (setup.py): finished with status 'done'
2022-05-17T14:51:42.2088769Z   Created wheel for antlr4-python3-runtime: filename=antlr4_python3_runtime-4.7.2-py3-none-any.whl size=140950 sha256=e59d8dcd7a8d756c5150632eaf1b5a19191cd2b2930e314ebaa1ea7203008819
2022-05-17T14:51:42.2090970Z   Stored in directory: /home/vsts/.cache/pip/wheels/63/93/52/480c17789fbf685f5d0e33e83c311f4a844cd6e2f5cf036c03
2022-05-17T14:51:42.2131576Z   Building wheel for jsondiff (setup.py): started
2022-05-17T14:51:42.5119837Z   Building wheel for jsondiff (setup.py): finished with status 'done'
2022-05-17T14:51:42.5128949Z   Created wheel for jsondiff: filename=jsondiff-1.3.1-py3-none-any.whl size=6607 sha256=9d5975a252690e9aeb87aaf8db00bbb052f1c51af3baadc09e9dd89efc3ae5c6
2022-05-17T14:51:42.5131663Z   Stored in directory: /home/vsts/.cache/pip/wheels/8e/aa/ed/53bdaa64c4c29f7f389572280e9560dbc29adbbc7663a6f92d
2022-05-17T14:51:42.5157171Z Successfully built antlr4-python3-runtime jsondiff
2022-05-17T14:51:43.4515955Z Installing collected packages: tabulate, portalocker, pkginfo, opencensus-context, jsondiff, invoke, azure-nspkg, azure-common, argcomplete, applicationinsights, antlr4-python3-runtime, xmltodict, wrapt, websocket-client, typing-extensions, semver, rsa, python-dateutil, PySocks, PyJWT, pycparser, psutil, protobuf, pathlib2, jmespath, javaproperties, isodate, humanfriendly, colorama, charset-normalizer, cachetools, azure-mgmt-nspkg, azure-cli-telemetry, requests, knack, googleapis-common-protos, google-auth, deprecated, cffi, azure-mgmt-datalake-nspkg, requests-oauthlib, PyNaCl, google-api-core, cryptography, bcrypt, azure-cosmos, azure-core, PyGithub, paramiko, opencensus, msrest, azure-storage-common, azure-mgmt-core, adal, sshtunnel, scp, msrestazure, msal, fabric, azure-synapse-spark, azure-synapse-managedprivateendpoints, azure-synapse-artifacts, azure-synapse-accesscontrol, azure-multiapi-storage, azure-mgmt-web, azure-mgmt-trafficmanager, azure-mgmt-synapse, azure-mgmt-storage, azure-mgmt-sqlvirtualmachine, azure-mgmt-sql, azure-mgmt-signalr, azure-mgmt-servicelinker, azure-mgmt-servicefabricmanagedclusters, azure-mgmt-servicefabric, azure-mgmt-servicebus, azure-mgmt-security, azure-mgmt-search, azure-mgmt-resource, azure-mgmt-redis, azure-mgmt-redhatopenshift, azure-mgmt-recoveryservicesbackup, azure-mgmt-recoveryservices, azure-mgmt-rdbms, azure-mgmt-privatedns, azure-mgmt-policyinsights, azure-mgmt-network, azure-mgmt-netapp, azure-mgmt-msi, azure-mgmt-monitor, azure-mgmt-media, azure-mgmt-marketplaceordering, azure-mgmt-maps, azure-mgmt-managementgroups, azure-mgmt-loganalytics, azure-mgmt-keyvault, azure-mgmt-iothubprovisioningservices, azure-mgmt-iothub, azure-mgmt-iotcentral, azure-mgmt-imagebuilder, azure-mgmt-hdinsight, azure-mgmt-extendedlocation, azure-mgmt-eventhub, azure-mgmt-eventgrid, azure-mgmt-dns, azure-mgmt-datamigration, azure-mgmt-databoxedge, azure-mgmt-cosmosdb, azure-mgmt-containerservice, azure-mgmt-containerregistry, azure-mgmt-containerinstance, azure-mgmt-compute, azure-mgmt-cognitiveservices, azure-mgmt-cdn, azure-mgmt-billing, azure-mgmt-batchai, azure-mgmt-batch, azure-mgmt-applicationinsights, azure-mgmt-appconfiguration, azure-mgmt-apimanagement, azure-mgmt-advisor, azure-loganalytics, azure-keyvault-keys, azure-keyvault-administration, azure-datalake-store, azure-data-tables, azure-appconfiguration, msal-extensions, azure-mgmt-reservations, azure-mgmt-relay, azure-mgmt-managedservices, azure-mgmt-kusto, azure-mgmt-devtestlabs, azure-mgmt-deploymentmanager, azure-mgmt-datalake-store, azure-mgmt-datalake-analytics, azure-mgmt-consumption, azure-mgmt-botservice, azure-mgmt-authorization, azure-keyvault, azure-graphrbac, azure-batch, azure-identity, azure-cli-core, opencensus-ext-azure, azure-cli
2022-05-17T14:52:45.1198767Z Successfully installed PyGithub-1.55 PyJWT-2.4.0 PyNaCl-1.4.0 PySocks-1.7.1 adal-1.2.7 antlr4-python3-runtime-4.7.2 applicationinsights-0.11.10 argcomplete-1.12.3 azure-appconfiguration-1.1.1 azure-batch-12.0.0 azure-cli-2.36.0 azure-cli-core-2.36.0 azure-cli-telemetry-1.0.6 azure-common-1.1.28 azure-core-1.24.0 azure-cosmos-3.2.0 azure-data-tables-12.2.0 azure-datalake-store-0.0.52 azure-graphrbac-0.60.0 azure-identity-1.10.0 azure-keyvault-1.1.0 azure-keyvault-administration-4.0.0b3 azure-keyvault-keys-4.5.1 azure-loganalytics-0.1.1 azure-mgmt-advisor-9.0.0 azure-mgmt-apimanagement-3.0.0 azure-mgmt-appconfiguration-2.1.0b2 azure-mgmt-applicationinsights-1.0.0 azure-mgmt-authorization-0.61.0 azure-mgmt-batch-16.1.0 azure-mgmt-batchai-7.0.0b1 azure-mgmt-billing-6.0.0 azure-mgmt-botservice-0.3.0 azure-mgmt-cdn-12.0.0 azure-mgmt-cognitiveservices-13.1.0 azure-mgmt-compute-26.1.0 azure-mgmt-consumption-2.0.0 azure-mgmt-containerinstance-9.1.0 azure-mgmt-containerregistry-8.2.0 azure-mgmt-containerservice-19.0.0 azure-mgmt-core-1.3.0 azure-mgmt-cosmosdb-7.0.0b2 azure-mgmt-databoxedge-1.0.0 azure-mgmt-datalake-analytics-0.2.1 azure-mgmt-datalake-nspkg-3.0.1 azure-mgmt-datalake-store-0.5.0 azure-mgmt-datamigration-10.0.0 azure-mgmt-deploymentmanager-0.2.0 azure-mgmt-devtestlabs-4.0.0 azure-mgmt-dns-8.0.0 azure-mgmt-eventgrid-9.0.0 azure-mgmt-eventhub-9.1.0 azure-mgmt-extendedlocation-1.0.0b2 azure-mgmt-hdinsight-9.0.0 azure-mgmt-imagebuilder-1.0.0 azure-mgmt-iotcentral-9.0.0 azure-mgmt-iothub-2.2.0 azure-mgmt-iothubprovisioningservices-1.1.0 azure-mgmt-keyvault-9.3.0 azure-mgmt-kusto-0.3.0 azure-mgmt-loganalytics-13.0.0b4 azure-mgmt-managedservices-1.0.0 azure-mgmt-managementgroups-1.0.0 azure-mgmt-maps-2.0.0 azure-mgmt-marketplaceordering-1.1.0 azure-mgmt-media-9.0.0 azure-mgmt-monitor-3.0.0 azure-mgmt-msi-6.0.1 azure-mgmt-netapp-7.0.0 azure-mgmt-network-19.3.0 azure-mgmt-nspkg-3.0.2 azure-mgmt-policyinsights-1.0.0 azure-mgmt-privatedns-1.0.0 azure-mgmt-rdbms-10.0.0 azure-mgmt-recoveryservices-2.0.0 azure-mgmt-recoveryservicesbackup-4.1.1 azure-mgmt-redhatopenshift-1.0.0 azure-mgmt-redis-13.1.0 azure-mgmt-relay-0.1.0 azure-mgmt-reservations-0.6.0 azure-mgmt-resource-20.0.0 azure-mgmt-search-8.0.0 azure-mgmt-security-2.0.0b1 azure-mgmt-servicebus-7.1.0 azure-mgmt-servicefabric-1.0.0 azure-mgmt-servicefabricmanagedclusters-1.0.0 azure-mgmt-servicelinker-1.0.0b2 azure-mgmt-signalr-1.0.0b2 azure-mgmt-sql-4.0.0b1 azure-mgmt-sqlvirtualmachine-1.0.0b2 azure-mgmt-storage-20.0.0 azure-mgmt-synapse-2.1.0b2 azure-mgmt-trafficmanager-1.0.0 azure-mgmt-web-6.1.0 azure-multiapi-storage-0.8.0 azure-nspkg-3.0.2 azure-storage-common-1.4.2 azure-synapse-accesscontrol-0.5.0 azure-synapse-artifacts-0.12.0 azure-synapse-managedprivateendpoints-0.3.0 azure-synapse-spark-0.2.0 bcrypt-3.2.2 cachetools-5.1.0 cffi-1.15.0 charset-normalizer-2.0.12 colorama-0.4.4 cryptography-37.0.2 deprecated-1.2.13 fabric-2.7.0 google-api-core-2.7.3 google-auth-2.6.6 googleapis-common-protos-1.56.1 humanfriendly-10.0 invoke-1.7.1 isodate-0.6.1 javaproperties-0.5.2 jmespath-1.0.0 jsondiff-1.3.1 knack-0.9.0 msal-1.17.0 msal-extensions-1.0.0 msrest-0.6.21 msrestazure-0.6.4 opencensus-0.8.0 opencensus-context-0.1.2 opencensus-ext-azure-1.1.1 paramiko-2.11.0 pathlib2-2.3.7.post1 pkginfo-1.8.2 portalocker-1.7.1 protobuf-3.20.1 psutil-5.9.0 pycparser-2.21 python-dateutil-2.8.2 requests-2.27.1 requests-oauthlib-1.3.1 rsa-4.8 scp-0.13.6 semver-2.13.0 sshtunnel-0.1.5 tabulate-0.8.9 typing-extensions-4.2.0 websocket-client-1.3.2 wrapt-1.14.1 xmltodict-0.13.0
2022-05-17T14:52:45.6086092Z ##[section]Finishing: Install requirements
jiasli commented 2 years ago

Notice this line:

2022-05-17T14:51:39.8250199Z Requirement already satisfied: pyyaml in /usr/lib/python3/dist-packages (from knack~=0.9.0->azure-cli-core==2.36.0->azure-cli==2.36.0->-r /home/vsts/work/1/s/requirements.txt (line 8)) (5.3.1)

dist-packages is the python's site-packages location on Ubuntu.

I can reproduce with this ADO job:

- job: TestPyYAML
  pool:
    vmImage: 'ubuntu-20.04'
  steps:
  - bash: |
      python -V
      pip -V
      pip list

https://dev.azure.com/azure-sdk/public/_build/results?buildId=1573631&view=logs&j=6bf9371e-a0cd-548d-b37d-7daf15bfa6cd&t=40289a26-ef40-5bfe-9828-aedaccda14b6&l=73

Python 3.8.10
pip 20.0.2 from /usr/lib/python3/dist-packages/pip (python 3.8)
Package                Version             
---------------------- --------------------
...
PyYAML                 5.3.1

This means PyYAML 5.3.1 is actually installed by ADO agent. The root cause is because Ubuntu's repository only contains python3-yaml 5.3.1.

To solve it, you can add a UsePythonVersion task:

- job: TestPyYAML
  pool:
    vmImage: 'ubuntu-20.04'
  steps:
  - task: UsePythonVersion@0
    displayName: 'Use Python 3.8'
    inputs:
      versionSpec: 3.8
  - bash: |
      python -V
      pip -V
      pip list

https://dev.azure.com/azure-sdk/public/_build/results?buildId=1573625&view=logs&j=6bf9371e-a0cd-548d-b37d-7daf15bfa6cd&t=40289a26-ef40-5bfe-9828-aedaccda14b6&l=13

Python 3.8.12
pip 22.0.4 from /opt/hostedtoolcache/Python/3.8.12/x64/lib/python3.8/site-packages/pip (python 3.8)
Package    Version
---------- -------
pip        22.0.4
setuptools 56.0.0

It is also recommended to create a virtual environment and activate it: https://packaging.python.org/en/latest/guides/installing-using-pip-and-virtual-environments/#creating-a-virtual-environment

Then the issue should be gone.

jiasli commented 2 years ago

I can also reproduce this issue on Ubuntu docker image:

> docker run -it --rm ubuntu:focal
# apt update
# apt install python3 python3-pip python3-yaml
# pip list -v
Package    Version Location                       Installer
---------- ------- ------------------------------ ---------
pip        20.0.2  /usr/lib/python3/dist-packages
PyYAML     5.3.1   /usr/lib/python3/dist-packages
setuptools 45.2.0  /usr/lib/python3/dist-packages
wheel      0.34.2  /usr/lib/python3/dist-packages
jiasli commented 2 years ago

In summary, PyYAML 5.3.1 doesn't come from Knack's dependency, but comes from Ubuntu's apt package python3-yaml.

According to the changelog of python3-yaml, CVE-2020-1747 is already fixed in 5.3-2:

http://changelogs.ubuntu.com/changelogs/pool/main/p/pyyaml/pyyaml_5.3.1-1ubuntu0.1/changelog

- Resolves CVE-2020-1747: arbitrary command execution through python/
 object/new when FullLoader is used

Ubuntu developers can add security patches to their apt packages, making those packages different from their original source (such as PyPI). Even though its version is still 5.3.1, the CVE has been fixed. Your "package scanner" should take that into consideration and not rely solely on the version 5.3.1 to decide whether there is a CVE.

Quinncuatro commented 2 years ago

Huh, the UsePythonVersion@0 task seems to have me pulling PyYAML/6.0 now.

Though I'm not entirely sure how it's working. Is that package doing something like Since the user has Python 3.8.12, pull the 6.0 version of this package under the hood?

I'll look into setting up a Virtual Environment for this to further protect myself from any weird bugs and talk to our security team about BlackDuck flagging something that technically has been fixed.

Thank you so much for your help, though! I really don't think I would have been able to figure that one out on my own.

jiasli commented 2 years ago

Is that package doing something like Since the user has Python 3.8.12, pull the 6.0 version of this package under the hood?

Not really. UsePythonVersion will override Ubuntu's /usr/bin/python with /opt/hostedtoolcache/Python/3.8.12/x64/bin/python (as you can get with which python), thus giving you a fresh environment, not honoring /usr/lib/python3/dist-packages which is Ubuntu-specific.

Thank you so much for your help, though! I really don't think I would have been able to figure that one out on my own.

I am really glad I can be of help, even though this is not Knack or Azure CLI's problem. 😊