https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.ImageBuilder.ValidateHash/
Azure.ImageBuilder.ValidateHash - PSRule for Azure
External scripts that are not pinned may be modified to execute privileged actions by an unauthorized user.
azureimagebuilder