DefaultAzureCredential use in Production

[mthalman]

CodeQL violation: DefaultAzureCredential may only be used in non-production environments (internal link)

docker-tools/src/Microsoft.DotNet.ImageBuilder/src/AzureTokenCredentialProvider.cs

Line 67 in 9ec0a7c

credential ??= new DefaultAzureCredential();

[lbussell]

[Triage] This is in S360 here. It currently has a due date of 08-27-2025.

[mthalman]

This is still being reported even with the new change. I don't think the scanning takes into account the preprocessor directive. I think a suppression might be needed.