Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Nov 3, 2025

The rule Azure.Cosmos.DisableLocalAuth applies only to Cosmos DB NoSQL API accounts, not all Cosmos DB account types. The rule name incorrectly suggests broader applicability.

Changes

  • Rule conversion: Migrated from PowerShell to YAML format in Azure.Cosmos.Rule.yaml
  • Naming: Renamed to Azure.Cosmos.NoSQLLocalAuth with Azure.Cosmos.DisableLocalAuth as alias
  • Documentation: Created new docs at Azure.Cosmos.NoSQLLocalAuth.md; existing docs redirect with deprecation notice
  • Testing: Added alias verification test alongside primary name test
  • References: Updated rule index and changelog

Backward Compatibility

The old rule name continues to work as an alias. Rule ref (AZR-000420) and ruleSet (2024_06) unchanged to maintain baseline compatibility.

metadata:
  name: Azure.Cosmos.NoSQLLocalAuth
  ref: AZR-000420
  alias:
    - Azure.Cosmos.DisableLocalAuth

Fixes #3571

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • management.azure.com
    • Triggering command: /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/PSRule.Rules.Azure/PSRule.Rules.Azure/tests/PSRule.Rules.Azure.Tests/bin/Debug/net8.0/PSRule.Rules.Azure.Tests.runtimeconfig.json --depsfile /home/REDACTED/work/PSRule.Rules.Azure/PSRule.Rules.Azure/tests/PSRule.Rules.Azure.Tests/bin/Debug/net8.0/PSRule.Rules.Azure.Tests.deps.json /home/REDACTED/work/PSRule.Rules.Azure/PSRule.Rules.Azure/tests/PSRule.Rules.Azure.Tests/bin/Debug/net8.0/testhost.dll --port 37529 --endpoint 127.0.0.1:037529 --role client --parentprocessid 5201 --telemetryoptedin false (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Original prompt

This section details on the original issue you should resolve

<issue_title>[RULE] Rename Azure.Cosmos.DisableLocalAuth to reflect usage</issue_title>
<issue_description>### Existing rule

Azure.Cosmos.DisableLocalAuth

Suggested rule

Rename to Azure.Cosmos.NoSQLLocalAuth to reflect this applies only to No SQL API.

Add alias to the old name Azure.Cosmos.DisableLocalAuth.

This rule can possibly be converted to YAML during the update.

Update documentation links as required so that link no longer point to redirects.

Pillar

Security

Additional context

No response</issue_description>

Comments on the Issue (you are @copilot in this section)


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Copilot AI and others added 2 commits November 3, 2025 04:20
- Convert rule from PowerShell to YAML format
- Add alias Azure.Cosmos.DisableLocalAuth for backward compatibility
- Update rule documentation and create new file
- Update test to verify both new name and alias work
- Update rule index and changelog

Co-authored-by: BernieWhite <[email protected]>
Copilot AI changed the title [WIP] [RULE] Rename Azure.Cosmos.DisableLocalAuth to reflect usage Rename Azure.Cosmos.DisableLocalAuth to Azure.Cosmos.NoSQLLocalAuth Nov 3, 2025
Copilot AI requested a review from BernieWhite November 3, 2025 04:39
Copilot finished work on behalf of BernieWhite November 3, 2025 04:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[RULE] Rename Azure.Cosmos.DisableLocalAuth to reflect usage

2 participants