Tip: rebuild kaniko to 1.25.20+, and never let untrusted Dockerfiles see an Azure identity
- Pin CI images to kaniko ≥ 1.25.20 and rebuild custom executors/warmers from that tag.
- For untrusted or third-party Dockerfiles: no
AZURE_CLIENT_*/ federated token in the pod, and block IMDS. - If you already ran untrusted builds with an Azure identity, treat tokens issued in that window as compromised — review Entra sign-in and Azure activity logs; rotating the identity does not revoke issued tokens.
Sources: GitHub Advisory GHSA-5q7h-w9jf-cx97