forked from srnagar/azure-tools-for-java
-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Need to implement a check to flag calls to methods like ManagedIdentityCredentialBuilder.fromObjectId(String objectId). These methods are intended for very specific scenarios, and their usage should be limited. Instead, developers are encouraged to use other methods such as ManagedIdentityCredentialBuilder.resourceId(String resourceId) or ManagedIdentityCredentialBuilder.clientId(String clientId).
Implementation Details:
- Detect calls to ManagedIdentityCredentialBuilder.fromObjectId(String objectId).
- Flag these calls and display the suggested message.
- Provide links to the documentation or source code for ManagedIdentityCredentialBuilder.resourceId(String resourceId) and ManagedIdentityCredentialBuilder.clientId(String clientId).
Note:
warn that it's for a very niche scenario and while it will pass at dev time will likely fail after deployment. This is just to shift-left detection of bugs in customer code to reduce support costs for the 99% of users who this will be the wrong thing to use.
Metadata
Metadata
Assignees
Labels
No labels