Environment variables exposed when printed to log in Azure Pipelines

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_193
Category	Credential Hygiene
Severity	LOW

Impact

Environment variables are widely used in CI/CD systems as a common method of sharing secrets between processes. They may contain credentials, internal host addresses, and additional sensitive information. Once environment variables are printed to the pipeline job log, an attacker with access to the log can exfiltrate these secrets, reaching sensitive resources.