-
-
Notifications
You must be signed in to change notification settings - Fork 2
Azure.DevOps.Pipelines.Settings.LimitJobAuthorizationScope
github-actions edited this page Oct 21, 2023
·
2 revisions
category: Microsoft Azure DevOps Pipelines severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Settings.LimitJobAuthorizationScope.md
Project settings should limit job authorization scope.
Limiting the job authorization scope to the current project will prevent the job from being able to access resources in other projects. This can help prevent accidental access to resources in other projects.
Mininum TokenType: ReadOnly
Consider limiting the job authorization scope to the current project in the project settings.