Update deployment/secure_research_desktop/cloud_init/cloud-init-build…

…image-ubuntu-2004.mustache.yaml

Co-authored-by: James Robinson <[email protected]>

deployment/secure_research_desktop/cloud_init/cloud-init-buildimage-ubuntu-2004.mustache.yaml

@@ -407,6 +407,7 @@ runcmd:
 
   # Remove Linux omsagent before generalising the image
   - echo ">=== $(date +%s) Removing Linux omsagent ===<"
+  # We use the commit corresponding to a particular tag (currently 1.17.2-0) so that we can audit what the script is doing
   - wget https://raw.githubusercontent.com/Microsoft/OMS-Agent-for-Linux/c7e1a8f923844f989c8aa7957cee0e89708d821f/installer/scripts/onboard_agent.sh
   - sh onboard_agent.sh --purge || die "Could not remove Linux omsagent!";
   - rm onboard_agent.sh