-
-
Notifications
You must be signed in to change notification settings - Fork 2
Azure.DevOps.Pipelines.Settings.StatusBadgesPrivate
github-actions edited this page Dec 29, 2023
·
1 revision
category: Microsoft Azure DevOps Pipelines severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Settings.StatusBadgesPrivate.md
Status badges should not be publicly accessible.
Status badges are publicly accessible by default. This means anyone with the URL can view the status of a pipeline. Consider restricting access to status badges to prevent unauthorized access.
Mininum TokenType: ReadOnly
Consider restricting access to status badges to prevent unauthorized access.