-
-
Notifications
You must be signed in to change notification settings - Fork 3
Azure.DevOps.Pipelines.Settings.LimitJobAuthorizationScopeForReleasePipelines
github-actions edited this page Oct 21, 2023
·
2 revisions
category: Microsoft Azure DevOps Pipelines severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Settings.LimitJobAuthorizationScopeForReleasePipelines.md
Project settings should limit job authorization scope for release pipelines.
Release pipelines can be used to deploy to multiple environments. Each environment can be configured to use a different set of resources. Limiting the job authorization scope to the current project will prevent the job from being able to access resources in other projects. This can help prevent accidental access to resources in other projects.
Mininum TokenType: ReadOnly
Consider limiting the job authorization scope for release pipelines to the current project in the project settings.