Flight Log / Azure/bicep-registry-modules #5571
Fix Defender for Cloud security recommendation for extensionHostPoolRegistration parameter — a GitHub Copilot (GitHub) bot flight
The GitHub Copilot bot (GitHub) opened this pull request in Azure/bicep-registry-modules on Jul 10, 2025; a burn — closed unmerged after human review: +9 −6, 2 files, 2 reviews.
Flown by
- Lines
- +9 −6
- Files
- 2
- Commits
- 3
- Reviews
- 2
- To merge
- —
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
GitHub Copilot took on a fix in Azure/bicep-registry-modules for a Defender for Cloud finding: the extensionHostPoolRegistration parameter lacked the @secure() decorator and passed tokens in plaintext settings. The change touched two files, nine additions, six deletions, three commits. Two reviews filed two comments, no change requests. Closed unmerged after human review; logged as a burn.
From the pull request description
## Summary This PR addresses a security vulnerability in the `avm/res/compute/virtual-machine` module where the `extensionHostPoolRegistration` parameter was missing the `@secure()` decorator and passing sensitive tokens in plaintext settings instead of protected settings. ## Issue Defender for C…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedcopilot-swe-agent[bot]
- —committedcopilot-swe-agent[bot]
- —reviewed
- —committedcopilot-swe-agent[bot]
- Jul 10, 2025labeledmicrosoft-github-policy-service[bot]
- Jul 10, 2025labeledmicrosoft-github-policy-service[bot]
- Jul 11, 2025closedAlexanderSehr
Read next
Cite this flight: AgentRiders Flight Log, Azure/bicep-registry-modules#5571, record updated Nov 3, 2026, https://agentriders.com/logs/Azure/bicep-registry-modules/5571/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.