-
-
Notifications
You must be signed in to change notification settings - Fork 2
Azure.DevOps.Pipelines.Releases.Definition.InheritedPermissions
github-actions edited this page Oct 21, 2023
·
2 revisions
category: Microsoft Azure DevOps Repos severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Releases.Definition.InheritedPermissions.md
Release Pipeline permissions should not be inherited from the project.
Release Pipeline permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to resources.
Mininum TokenType: FineGrained
Consider removing inherited permissions from the release pipeline and setting permissions explicitly.