-
-
Notifications
You must be signed in to change notification settings - Fork 2
Azure.DevOps.Pipelines.Releases.Definition.ProjectValidUsers
github-actions edited this page Jan 20, 2024
·
1 revision
category: Microsoft Azure DevOps Pipelines severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Releases.ProjectValidUsers.md
Release definitions should not be assigned directly to the Project Valid Users group.
Release definitions should not be assigned directly to the Project Valid Users group. This group is inherited by all users in the project and will grant access to the release definition to all users.
Mininum TokenType: FineGrained
Remove the Project Valid Users group from the release definition acl.