azure-compliance by microsoft/github-copilot-for-azure
npx skills add https://github.com/microsoft/github-copilot-for-azure --skill azure-compliance| 属性 | 详情 |
|---|---|
| 最佳适用场景 | 合规性扫描、安全审计、Key Vault 过期检查 |
| 主要功能 | 全面的资源评估、Key Vault 过期监控 |
| MCP 工具 | azqr、订阅和资源组列表、Key Vault 项目检查 |
当用户希望执行以下操作时激活此技能：
az login 登录到 Azure| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |
Activate this skill when user wants to:
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者，精准高效
暂无相关 Skills
| 评估项 | 参考文档 |
|---|---|
| 全面合规性 (azqr) | references/azure-quick-review.md |
| Key Vault 过期监控 | references/azure-keyvault-expiration-audit.md |
| 资源图查询 | references/azure-resource-graph.md |
| 工具 | 用途 |
|---|---|
mcp_azure_mcp_extension_azqr | 运行 azqr 合规性扫描 |
mcp_azure_mcp_subscription_list | 列出可用订阅 |
mcp_azure_mcp_group_list | 列出资源组 |
keyvault_key_list | 列出保管库中的所有密钥 |
keyvault_key_get | 获取密钥详情（包括过期信息） |
keyvault_secret_list | 列出保管库中的所有机密 |
keyvault_secret_get | 获取机密详情（包括过期信息） |
keyvault_certificate_list | 列出保管库中的所有证书 |
keyvault_certificate_get | 获取证书详情（包括过期信息） |
| 优先级 | 指导原则 |
|---|---|
| 严重 | 需要立即修复，以防造成高影响暴露 |
| 高 | 在几天内解决以降低风险 |
| 中 | 在下一个冲刺周期内计划解决方案 |
| 低 | 在定期维护期间跟踪并修复 |
| 错误 | 消息 | 补救措施 |
|---|---|---|
| 需要身份验证 | "请登录" | 运行 az login 并重试 |
| 访问被拒绝 | "禁止访问" | 确认权限并修复角色分配 |
| 资源缺失 | "未找到" | 验证订阅和资源组选择 |
有关以编程方式访问 Key Vault，请参阅简明的 SDK 指南：
每周安装量
102.5K
代码仓库
GitHub 星标数
143
首次出现
2026年2月8日
安全审计
安装于
github-copilot102.4K
codex258
gemini-cli249
opencode231
cursor222
kimi-cli220
az login| Assessment | Reference |
|---|---|
| Comprehensive Compliance (azqr) | references/azure-quick-review.md |
| Key Vault Expiration | references/azure-keyvault-expiration-audit.md |
| Resource Graph Queries | references/azure-resource-graph.md |
| Tool | Purpose |
|---|---|
mcp_azure_mcp_extension_azqr | Run azqr compliance scans |
mcp_azure_mcp_subscription_list | List available subscriptions |
mcp_azure_mcp_group_list | List resource groups |
keyvault_key_list | List all keys in vault |
keyvault_key_get | Get key details including expiration |
keyvault_secret_list | List all secrets in vault |
keyvault_secret_get | Get secret details including expiration |
keyvault_certificate_list | List all certificates in vault |
keyvault_certificate_get | Get certificate details including expiration |
| Priority | Guidance |
|---|---|
| Critical | Immediate remediation required for high-impact exposure |
| High | Resolve within days to reduce risk |
| Medium | Plan a resolution in the next sprint |
| Low | Track and fix during regular maintenance |
| Error | Message | Remediation |
|---|---|---|
| Authentication required | "Please login" | Run az login and retry |
| Access denied | "Forbidden" | Confirm permissions and fix role assignments |
| Missing resource | "Not found" | Verify subscription and resource group selection |
For programmatic Key Vault access, see the condensed SDK guides:
Weekly Installs
102.5K
Repository
GitHub Stars
143
First Seen
Feb 8, 2026
Security Audits
Installed on
github-copilot102.4K
codex258
gemini-cli249
opencode231
cursor222
kimi-cli220