mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-11-09 12:49:27 +00:00
Normalize the PEM bundle at every CertificateCredential call site so azure-identity uses the leaf certificate for its thumbprint even when the source bundle lists an intermediate first. `check_certificate_creds_env_vars` now accepts the explicit CLI tenant_id/client_id so callers don't require matching AZURE_* env vars when they already have the values. Catch requests.exceptions.Timeout on the client-secret verification path so the Entra ID timeout raises a typed AzureCredentialsUnavailableError instead of leaking a requests exception. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>