Document Details
Secrets Best Practices
❌
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Bias Types:
⚠️
missing_linux_example
⚠️
windows_tools
⚠️
windows_first
Summary:
The documentation page demonstrates a bias toward Windows and Azure-native tooling. There are no explicit Linux or cross-platform examples, and references to tools and patterns (such as Azure PowerShell, Azure CLI, and service-specific integrations) are either Windows-centric or lack parity for Linux users. The service-specific best practices section includes links that default to Windows/PowerShell tabs or examples, and some services (e.g., SQL IaaS) reference Windows-specific integration. There is a lack of explicit mention of Linux tools, shell commands, or non-Windows secret management patterns.
Recommendations:
- Provide Linux-specific examples and guidance alongside Windows/PowerShell examples, such as using bash scripts, Linux environment variable management, and open-source secret management tools (e.g., HashiCorp Vault, sops).
- Ensure that service-specific links and code samples include both Azure CLI and PowerShell (or other cross-platform tools), and default to a neutral or cross-platform tab.
- Mention and recommend open-source or cross-platform secret scanning tools (e.g., truffleHog, git-secrets) in addition to Azure DevOps Credential Scanner.
- Where possible, include references to Linux-based deployment and automation patterns (e.g., systemd environment files, Kubernetes secrets) and not just Azure-native or Windows-centric approaches.
- Audit all linked articles to ensure parity in instructions and examples for both Windows and Linux users.
Create pull request