bicepconfig.json

{
  "analyzers": {
    "core": {
      "enabled": true,
      "verbose": true,
      "rules": {
        "adminusername-should-not-be-literal": {
          "level": "error"
        },
        "no-hardcoded-env-urls": {
          "level": "error"
        },
        "no-unnecessary-dependson": {
          "level": "error"
        },
        "no-unused-params": {
          "level": "error"
        },
        "no-unused-vars": {
          "level": "error"
        },
        "outputs-should-not-contain-secrets": {
          "level": "error"
        },
        "prefer-interpolation": {
          "level": "error"
        },
        "secure-parameter-default": {
          "level": "error"
        },
        "simplify-interpolation": {
          "level": "error"
        },
        "protect-commandtoexecute-secrets": {
          "level": "error"
        },
        "use-stable-vm-image": {
          "level": "error"
        },
        "explicit-values-for-loc-params": {
          "level": "off" // CARML Reason: Our modules default to e.g. the location of their parent resource group which is sufficient if deploying a self-contained solution
        },
        "no-hardcoded-location": {
          "level": "error"
        },
        "no-loc-expr-outside-params": {
          "level": "error"
        },
        "max-outputs": {
          "level": "error"
        },
        "max-params": {
          "level": "error"
        },
        "max-resources": {
          "level": "error"
        },
        "max-variables": {
          "level": "error"
        },
        "artifacts-parameters": {
          "level": "error"
        },
        "no-unused-existing-resources": {
          "level": "error"
        },
        "prefer-unquoted-property-names": {
          "level": "off" // CARML Reason: This complains primarily about RBAC roles which are all in quotes to be consistent within the list of roles with and without spaces in their name
        },
        "secure-secrets-in-params": {
          "level": "error"
        },
        "use-stable-resource-identifiers": {
          "level": "error"
        },
        "secure-params-in-nested-deploy": {
          "level": "error"
        },
        "use-recent-api-versions": {
          "level": "off"
        },
        "use-resource-id-functions": {
          "level": "error"
        }
      }
    }
  }
}