56 results available

azure-compliance

microsoft

·

Last changed

Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening applied 8 targeted changes and preserved all other text. Classified findings before hardening: 3. Classified findings closed: 0. Classified findings remaining: 3. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 7.

Open before hardening

3

Low

Open after hardening

3

Low

File	Group	Subtype	Severity	Status
references/auth-best-practices.md	Prompt Injection	Indirect prompt injection	Low	Open
references/sdk/azure-keyvault-py.md	Supply Chain & Install-Time Trust	Install-time download and execute	Low	Open
references/sdk/azure-keyvault-py.md	Malicious Code & Command Execution	—	Low	Open

3 findings

SKILL.md

Azure Compliance & Security Auditing

Quick Reference

Property	Details
Best for	Compliance scans, security audits, Key Vault expiration checks
Primary capabilities	Comprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP tools	azqr, subscription and resource group listing, Key Vault item inspection

Prerequisites

Authentication: user is logged in to Azure via az login
Permissions to read resource configuration and Key Vault metadata

Assessments

Assessment	Reference
Comprehensive Compliance (azqr)	references/azure-quick-review.md
Key Vault Expiration	references/azure-keyvault-expiration-audit.md
Resource Graph Queries	references/azure-resource-graph.md

MCP Tools

Tool	Purpose
`mcp_azure_mcp_extension_azqr`	Run azqr compliance scans
`mcp_azure_mcp_subscription_list`	List available subscriptions
`mcp_azure_mcp_group_list`	List resource groups
`keyvault_key_list`	List all keys in vault
`keyvault_key_get`	Get key details including expiration
`keyvault_secret_list`	List all secrets in vault
`keyvault_certificate_list`	List all certificates in vault
`keyvault_certificate_get`	Get certificate details including expiration

Assessment Workflow

Select scope (subscription or resource group) for Comprehensive Resources Assessment.
Run azqr and capture output artifacts.
Analyze Scan Results and summarize findings and recommendations.
Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
Classify issues and propose remediation or fix steps for each finding.

Priority Classification

Priority	Guidance
Critical	Immediate remediation required for high-impact exposure
High	Resolve within days to reduce risk
Medium	Plan a resolution in the next sprint
Low	Track and fix during regular maintenance

Error Handling

Error	Message	Remediation
Authentication required	"Please login"	Run `az login` and retry
Access denied	"Forbidden"	Confirm permissions
Missing resource	"Not found"	Verify subscription and resource group selection

Best Practices

Run compliance scans on a regular schedule (weekly or monthly)
Track findings over time and verify remediation effectiveness
Separate compliance reporting from remediation execution
Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides:

Key Vault (Python): Secrets/Keys/Certs
Secrets: TypeScript | Rust | Java
Keys: .NET | Java | TypeScript | Rust
Certificates: Rust

Install

Install with chainctl


chainctl skill install public/microsoft/azure-compliance:latest

Get started with chainctl

View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/microsoft/azure-skills

Upstream commit74f27068b21b85807e35ae69ab3976756b060c03

OCI reference

skills.cgr.dev/public/github.com/microsoft/skills/azure-compliance:latest

License

MIT

Files

HARDENING.md

LICENSE

SKILL.md

references/auth-best-practices.md

references/azqr-recommendations.md

references/azqr-remediation-patterns.md

references/azure-keyvault-expiration-audit.md

references/azure-quick-review.md

references/azure-resource-graph.md

references/sdk/azure-keyvault-certificates-rust.md

references/sdk/azure-keyvault-keys-rust.md

references/sdk/azure-keyvault-keys-ts.md

references/sdk/azure-keyvault-py.md

references/sdk/azure-keyvault-secrets-rust.md

references/sdk/azure-keyvault-secrets-ts.md

references/sdk/azure-security-keyvault-keys-dotnet.md

references/sdk/azure-security-keyvault-keys-java.md

references/sdk/azure-security-keyvault-secrets-java.md

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.