From cecd892569447c1b00c94529ebdb922b8cb1f92c Mon Sep 17 00:00:00 2001 From: YanaXu Date: Thu, 9 Nov 2023 13:22:07 +0800 Subject: [PATCH] workaround markdownlint issue --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 2a52ed9fa..4fd540c73 100644 --- a/README.md +++ b/README.md @@ -42,6 +42,8 @@ Azure Login Action supports different ways of authentication with Azure. > [!WARNING] > By default, the output of Azure CLI commands is printed to the stdout stream. Without redirecting the stdout stream, contents in it will be stored in the build log of the action. Configure Azure CLI to _not_ show output in the console screen or print in the log by setting the environment variable `AZURE_CORE_OUTPUT` to `none`. If you need the output of a specific command, override the default setting using the argument `--output` with your format of choice. For more information on output options with the Azure CLI, see [Format output](https://learn.microsoft.com/cli/azure/format-output-azure-cli). +**** + > [!WARNING] > Avoid using managed identity login on self-hosted runners in public repositories. Managed identities enable secure authentication with Azure resources and obtain Azure AD tokens without the need for explicit credential management. Any user can open pull requests against your repository and access your self-hosted runners without credentials. See more details in [self-hosted runner security](https://docs.github.com/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#self-hosted-runner-security).