# Enable automatic enrollment to Advanced Security for Azure DevOps

GitHub advanced Security for Azure DevOps should be automatically enabled for new projects.

Source: https://maester.dev/docs/tests/AZDO.1026

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/sebastianclaesson" title="Sebastian Claesson · Original author"><img src="https://github.com/SebastianClaesson.png" alt="Sebastian Claesson" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/sebastianclaesson">Sebastian Claesson</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/maester">Maester</a> · Azure DevOps · Repositories · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId AZDO.1026
```

## Overview

GitHub advanced Security for Azure DevOps **should be** automatically enabled for new projects.

Rationale: Newly created projects should have Advanced Security enabled upon creation.

#### Remediation action

Organization-level onboarding

1. Sign in to your organization.
2. Go to your Organization settings for your Azure DevOps organization.
3. Select Repositories.
4. Select Enable all and see an estimate for the number of active committers for your organization appear.
5. Select Begin billing to activate Advanced Security for every existing repository in each project in your organization.
6. Select Automatically enable Advanced Security for new repositories so that any newly created projects have Advanced Security enabled upon creation.

**Results:**
Newly created projects have Advanced Security enabled upon creation.

#### Related links

* [Learn - GitHub Advanced Security for Azure DevOps](https://learn.microsoft.com/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#organization-level-onboarding)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | AZDO.1026 |
| Severity | Medium |
| Suite | Maester |
| Product | Azure DevOps |
| Feature | Repositories |
| Area | Engineering systems |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | T1552.001 Credentials In Files, T1195.001 Compromise Software Dependencies and Development Tools, T1190 Exploit Public-Facing Application |
| Supports controls | nist-800-53-r5:SA-11, nist-800-53-r5:IA-5(7) |
| PowerShell test | [Test-AzdoOrganizationAutomaticEnrollmentAdvancedSecurityNewProject](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1026.ps1) |
| Services | AzureDevOps |
| Learn more | [https://learn.microsoft.com/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#organization-level-onboarding](https://learn.microsoft.com/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#organization-level-onboarding) |

</details>

## Source

- Test: [`tests/maester/azure-devops/Test.AZDO.1026.ps1`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1026.ps1)
- Documentation: [`tests/maester/azure-devops/Test.AZDO.1026.md`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1026.md)