source-controller leaks Azure Storage SAS token into logs
ImpactWhen source-controller is configured to use an [Azure SAS token](https://v2-2.docs.fluxcd.io/flux/components/source/buckets/#azure-blob-sas-token-example) when connecting to Azure Blob Storage, the token was logged along with the Azure URL when the controller encountered a connection error. An attacker with access to the source-controller logs could use the token to gain access to the Azure Blob Storage until the token expires.PatchesThis vulnerability was fixed in source-controller **v1.2.5**.WorkaroundsThere is no workaround for this vulnerability except for using a different auth mechanism such as [Azure Workload Identity](https://v2-2.docs.fluxcd.io/flux/components/source/buckets/#azure).CreditsThis issue was reported and fixed by Jagpreet Singh Tamber (@jagpreetstamber) from the Azure Arc team.Referenceshttps://github.com/fluxcd/source-controller/pull/1430For more informationIf you have any questions or comments about this advisory:Open an issue in the source-controller repository.Contact us at the CNCF Flux Channel.