Manage Secrets - Document Details

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.

View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types

powershell_heavy

windows_first

missing_linux_example

windows_tools

Summary

The documentation consistently provides PowerShell examples for all supported scenarios, and in some cases, PowerShell is the only scripting language shown alongside Azure CLI and ARM templates. There are no explicit Linux shell (bash) or cross-platform scripting examples outside of Azure CLI, and PowerShell is presented as a primary automation tool. In some cases, features are not supported in PowerShell, but there are no alternative Linux-native instructions or notes for Linux users. The documentation assumes familiarity with Windows-centric tools and patterns, such as PowerShell objects and parameters, without offering parity for Linux shell users.

Recommendations

Add explicit bash (Linux shell) scripting examples for all scenarios where PowerShell is shown, especially for tasks like setting environment variables, referencing secrets, and mounting volumes.
Where PowerShell is not supported (e.g., Key Vault references, mounting secrets as a volume), provide alternative instructions or workarounds for Linux users, or clearly state that Azure CLI is the cross-platform alternative.
Reorder examples to present Azure CLI (which is cross-platform) before PowerShell, or group examples by platform rather than by tool.
Include notes or callouts for Linux/macOS users, especially where Windows-specific tools or patterns are used.
Consider adding a section summarizing cross-platform support for each feature, clarifying which tools and platforms are supported.

Create Pull Request

Scan History

Date	Scan	Status	Result
2026-01-12 00:00	#99	completed	Biased
2026-01-11 06:20	#98	completed	Biased
2026-01-10 00:00	#92	completed	Clean
2026-01-06 22:28	#78	completed	Clean
2025-12-29 18:00	#48	cancelled	Biased
2025-12-15 00:00	#7	completed	Clean
2025-12-14 05:05	#6	completed	Clean

Flagged Code Snippets

$EnvId = (Get-AzContainerAppManagedEnv -ResourceGroupName my-resource-group -EnvName my-environment-name).Id
$TemplateObj = New-AzContainerAppTemplateObject -Name queuereader -Image demos/queuereader:v1
$SecretObj = New-AzContainerAppSecretObject -Name queue-connection-string -Value $QueueConnectionString

$ContainerAppArgs = @{
    Name = 'my-resource-group'
    Location = '<location>'
    ResourceGroupName = 'my-resource-group'
    ManagedEnvironmentId = $EnvId
    TemplateContainer = $TemplateObj
    ConfigurationSecret = $SecretObj
}

New-AzContainerApp @ContainerAppArgs

$EnvId = (Get-AzContainerAppManagedEnv -ResourceGroupName my-resource-group -EnvName my-environment-name).Id

$SecretObj = New-AzContainerAppSecretObject -Name queue-connection-string -Value $QueueConnectionString
$EnvVarObjQueue = New-AzContainerAppEnvironmentVarObject -Name QueueName -Value myqueue
$EnvVarObjConn = New-AzContainerAppEnvironmentVarObject -Name ConnectionString -SecretRef queue-connection-string -Value secretref
$TemplateObj = New-AzContainerAppTemplateObject -Name myQueueApp -Image demos/myQueueApp:v1 -Env $EnvVarObjQueue, $EnvVarObjConn

$ContainerAppArgs = @{
    Name = 'myQueueApp'
    Location = '<location>'
    ResourceGroupName = 'my-resource-group'
    ManagedEnvironmentId = $EnvId
    TemplateContainer = $TemplateObj
    ConfigurationSecret = $SecretObj
}

New-AzContainerApp @ContainerAppArgs