Azure "certification" that Azure SW, used by customers, is checked to only contain approved code

Question

In the Spirit of Zero Trust, Azure customers are asking for Azure "certification" that Azure software, for customer use, has a level of Zero Trust "certification".
What Azure "certifications" are available to share with customers that Azure SW, used by customers, has been scanned and is free of "solarwind" type and other issues ?
Is there Azure "certification" that Azure SW, used by customers, is checked to only contain approved code (eg SaST, Static Application Security Testing ) ?
Customer Need: Avoid a "SolarWinds" problem of Azure SW containing un-authorized capability.
How does the customer know the Azure SW is "certified" free of "bad stuff" ?
Azure Use Case# 1 : Azure SW Discovery and Assessment. Customer is considering use of Azure SW (agentless and server installed versions) for discovery / assessment of customer's on-prem environment.
Azure Use Case#2: Azure SW Migrate. Customer is considering use of Azure SW to migrate from on-prem to Azure (Apps, Data, Web Aps, etc)

Thanks