docs: Guidance for higher-level SDKs to consume MSAL mTLS PoP#932

Closed

gladjohn wants to merge 2 commits into

devfrom

gladjohn/sdk-integration-guidance

GitHub Advanced Security / CodeQL failed Jun 21, 2026 in 7s

13 new alerts including 13 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

13 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 236 in msal/windows_certificate.py

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

is used in a hashing algorithm (SHA1) that is insecure.

Check failure on line 108 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 109 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 121 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 122 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 123 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 133 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 148 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 174 in sample/devapp_msi_v2_mtls/app.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.
This expression logs

as clear text.

Check failure on line 90 in sample/msi_v2_sample.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.

Check failure on line 91 in sample/msi_v2_sample.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.

Check failure on line 92 in sample/msi_v2_sample.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

as clear text.

Check failure on line 146 in tests/test_e2e_mtls_pop.py

Code scanning / CodeQL

Clear-text logging of sensitive information High test

This expression logs

as clear text.