Container Registry

Abusing Azure Container Registry: admin credentials and repository access, ACR Tasks that run as a managed identity, and image poisoning.

អាន 1 នាទីបានធ្វើបច្ចុប្បន្នភាព 7 តុលា 2026florianametteអ្នករួមចំណែក 1 នាក់
សួរក្នុងជំនួយការរបស់អ្នក (MCP)កែលើ GitHub

Azure Container Registry holds the images that AKS, App Service, and Container Instances pull and run, which makes it both a credential store and a supply-chain foothold. The admin account and repository rights give read and write to images; ACR Tasks run build steps in-registry as a managed identity.

Pages#

  • Registry access: admin credentials and repository pull and push.
  • Tasks: ACR Tasks running as a managed identity, and image poisoning.

References#

មុនNode identityបន្ទាប់ Registry access