Findings by source

Azure OpenAI

Code · GitHub (demo) Microsoft · Cloud AI platform · package: Azure.AI.OpenAI

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
26
Medium
People
0
Committers are not collected
Repositories
1
0 public · 1 package
Keys in code
0
None found in the files read
source-codefixturecorroborated
Next steps

Recommended actions

  1. 01Azure OpenAI SDKs appear in 1 repository. Decide whether this vendor is approved for engineering, and route calls through one gateway or an Azure OpenAI deployment so keys, logging, and data terms are managed centrally.
Billing · Azure

What it costs

Last 30 days
$2,665
Previous 30
$1,733
Change
+54%
2026-06-16: 282026-06-17: 252026-06-18: 312026-06-19: 242026-06-20: 112026-06-21: 102026-06-22: 262026-06-23: 322026-06-24: 282026-06-25: 262026-06-26: 362026-06-27: 112026-06-28: 112026-06-29: 332026-06-30: 292026-07-01: 382026-07-02: 352026-07-03: 332026-07-04: 122026-07-05: 142026-07-06: 352026-07-07: 422026-07-08: 412026-07-09: 402026-07-10: 402026-07-11: 152026-07-12: 142026-07-13: 452026-07-14: 382026-07-15: 362026-07-16: 422026-07-17: 482026-07-18: 132026-07-19: 172026-07-20: 442026-07-21: 562026-07-22: 642026-07-23: 612026-07-24: 632026-07-25: 252026-07-26: 232026-07-27: 652026-07-28: 632026-07-29: 712026-07-30: 692026-07-31: 752026-08-01: 272026-08-02: 222026-08-03: 812026-08-04: 762026-08-05: 822026-08-06: 782026-08-07: 872026-08-08: 262026-08-09: 302026-08-10: 792026-08-11: 832026-08-12: 892026-08-13: 842026-08-14: 892026-08-15: 312026-08-16: 302026-08-17: 922026-08-18: 882026-08-19: 1012026-08-20: 992026-08-21: 972026-08-22: 352026-08-23: 392026-08-24: 1002026-08-25: 1082026-08-26: 1072026-08-27: 1052026-08-28: 1082026-08-29: 412026-08-30: 412026-08-31: 1052026-09-01: 1102026-09-02: 1322026-09-03: 1172026-09-04: 1312026-09-05: 432026-09-06: 462026-09-07: 1212026-09-08: 1442026-09-09: 1172026-09-10: 1432026-09-11: 1362026-09-12: 512026-09-13: 48
06-1609-13
Contoso Production $1,909 · Contoso Sandbox $756
GitHub (demo) · fixture

Where it lives in code

SDK packages · 1
Repositories
RepositorySignalsPushed
contoso/helpdesk-botSDK packages6 d ago
Packages
Azure.AI.OpenAI nuget1 repo
Same app, other lanes

Related findings

Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

No people are linked to this app.

Why

Evidence

  1. source_code · Sep 8, 2026
    Azure OpenAI in 1 repository via GitHub (demo): packages Azure.AI.OpenAI
    Detail
    {
      "repos": [
        "contoso/helpdesk-bot"
      ],
      "configs": [],
      "packages": [
        {
          "name": "Azure.AI.OpenAI",
          "repos": 1,
          "ecosystem": "nuget"
        }
      ],
      "endpoints": []
    }
  2. corroboration
    Also found by another lane (azure:/subscriptions/5c2e1f4a-2222-4a5b-9c8d-000000000002/resourcegroups/rg-sandbox-dave/providers/microsoft.cognitiveservices/accounts/dave-openai-test)
    Detail
    {
      "findingKey": "azure:/subscriptions/5c2e1f4a-2222-4a5b-9c8d-000000000002/resourcegroups/rg-sandbox-dave/providers/microsoft.cognitiveservices/accounts/dave-openai-test"
    }
  3. corroboration
    Also found by another lane (azure:/subscriptions/5c2e1f4a-1111-4a5b-9c8d-000000000001/resourcegroups/rg-ai-prod/providers/microsoft.cognitiveservices/accounts/aoai-prod-eastus)
    Detail
    {
      "findingKey": "azure:/subscriptions/5c2e1f4a-1111-4a5b-9c8d-000000000001/resourcegroups/rg-ai-prod/providers/microsoft.cognitiveservices/accounts/aoai-prod-eastus"
    }
  4. corroboration
    Also found by another lane (pp:shared_azureopenai)
    Detail
    {
      "findingKey": "pp:shared_azureopenai"
    }