-
-
Notifications
You must be signed in to change notification settings - Fork 3
Azure.DevOps.Tasks.VariableGroup.InheritedPermissions
github-actions edited this page Jan 20, 2024
·
1 revision
category: Microsoft Azure DevOps Variable Groups severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Tasks.VariableGroup.InheritedPermissions.md
Variable group permissions should not be inherited from the project.
Variable group permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to sensitive information.
Mininum TokenType: FineGrained
Consider removing inherited permissions from the variable group and setting permissions explicitly.