az webapp secure-build

  • Preview

This command group is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Review open source vulnerabilities in a web app's packages.

Commands

Name Description Type Status
az webapp secure-build show

Show the Secure Build report for the active deployment of a Linux web app.

 Core Preview

az webapp secure-build show

Preview

Command group 'webapp secure-build' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Show the Secure Build report for the active deployment of a Linux web app.

The service uses a cached report when available. Use --rescan to request fresh dependency analysis, which can take several minutes. Output follows the Azure CLI output configuration and is JSON when no format is configured. Use --output table for a human-readable summary and up to 20 findings; when --query is supplied, standard query processing controls the resulting table shape. JSON output and the provided Kudu link contain the full report. Secure Build currently supports Python dependency information produced by supported platform builds.

az webapp secure-build show --name
                            --resource-group
                            [--rescan]
                            [--slot]

Examples

Show a human-readable Secure Build report for the active deployment.

az webapp secure-build show --resource-group ResourceGroup --name AppName --output table

Show the complete Secure Build report as JSON.

az webapp secure-build show --resource-group ResourceGroup --name AppName --output json

Run a fresh analysis for a deployment slot and show critical findings.

az webapp secure-build show --resource-group ResourceGroup --name AppName --slot staging --rescan --query "findings[?advisory.severity=='CRITICAL']" --output table

Required Parameters

--name -n

Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--rescan

Run a fresh dependency analysis instead of using a cached report.

Property Value
Default value: False
--slot -s

Name of the web app slot. Defaults to the production slot.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

Property Value
Default value: False
--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property Value
Default value: False
--output -o

Output format.

Property Value
Default value: json
Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property Value
Default value: False