azd-deployment
Facilitates deployment of containerized applications to Azure Container Apps using Azure Developer CLI, enhancing infrastructure management.
Install this skill
Security score
The azd-deployment skill was audited on Feb 21, 2026 and we found 13 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 59 | ```yaml |
Template literal with variable interpolation in command context
| 127 | ```json |
Template literal with variable interpolation in command context
| 138 | Syntax: `${VAR_NAME}` or `${VAR_NAME=default_value}` |
Template literal with variable interpolation in command context
| 210 | ```bicep |
Template literal with variable interpolation in command context
| 243 | ```yaml |
Access to .env file
| 34 | │ ├── .env # Environment-specific values (azd-managed) |
Access to .env file
| 121 | 1. **Local `.env`** - For local development only |
Access to .env file
| 122 | 2. **`.azure/<env>/.env`** - azd-managed, auto-populated from Bicep outputs |
Access to .env file
| 155 | // In main.bicep - outputs auto-populate .azure/<env>/.env |
Access to .env file
| 293 | 2. **Bicep outputs auto-populate .azure/<env>/.env** - Don't manually edit |
External URL reference
| 144 | azd env set AZURE_OPENAI_ENDPOINT "https://my-openai.openai.azure.com" |
External URL reference
| 145 | azd env set AZURE_SEARCH_ENDPOINT "https://my-search.search.windows.net" |
External URL reference
| 215 | value: 'http://ca-backend-${resourceToken}' // Internal DNS |