How to run from powershell about azqr

[red-erik]

Hello,
it seems to be working now.
I'll keep you posted.

Regards,
Red.

[cmendible]

Either you have the following env variables set to a non empty value:

• AZURE_CLIENT_ID
• AZURE_CLIENT_SECRET
• AZURE_TENANT_ID

Or you are running azqr from a Virtual Machine with a Managed Identity.

Since version 0.50.0 you can force azqr to use de Azure CLI credentials by using the -f flag.

Hope it helps.

[red-erik]

Hello,
I'm trying with powershell from my Desktop after using AZ login but I'm not able to have ir working any way.
The -f parameter does not give any different result.
Do I really need to set some system wide variables ? From documentation it seems to fully support Azure CLI

Regards,
Red.

P.S. I'm running it from a standard powershell without admin privileges (PowerShell-7.4.1-win-x64)

[cmendible]

azqr uses DefaultAzureCredential and the way it works is outlined here: https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication?tabs=bash#2-authenticate-with-azure

Basically it attempts the following credentials in order:

• Option 1: Define environment variables
• Option 2: Use workload identity
• Option 3: Use a managed identity
• Option 4: Sign in with Azure CLI

Can you share the result of executing: azqr -v

With the -f flag azqr no longer uses DefaultAzureCredential and forces the use of AzureCLICredential so I would expect a different error message if any.

azqr/internal/scan.go

Line 110 in 5614b07

if !forceAzureCliCredential {

[red-erik]

Hello,
this is what I see

Regards,
Red.

[cmendible]

the f flag is for the scan command.

Please run: azqr scan -f

[red-erik]

./azqr scan --mask=false -f -s xxxxxx-xxxxxx-xxxxxx-xxxxxxx
2024-02-16T12:58:36+01:00 FTL Failed to list Resource Groups error="DefaultAzureCredential: failed to acquire a token.\nAttempted credentials:\n\tEnvironmentCredential: missing environment variable AZURE_TENANT_ID\n\tWorkloadIdentityCredential: no client ID specified. Check pod configuration or set ClientID in the options\n\tManagedIdentityCredential: ManagedIdentityCredential: failed to retreive secret key from the identity endpoint: could not read file (C:\ProgramData\AzureConnectedMachineAgent\Tokens\

[cmendible]

Sorry about that! Just found a bug when reading the value of the -f flag I'll release a new version shortly.

[cmendible]

Please download version 0.52.0 from here: https://github.com/Azure/azqr/releases/tag/v.0.52.0 and run azqr scan with the -f flag.