Azure DevOps

46 checks24 High15 Medium2 Low5 Info

Security policies12Pipelines12Repositories10Users and access5Resource usage and limits3Auditing2Organization policies2

Run theseInvoke-Maester -Product azure-devopsCopy

46 checks

Group byFeatureAreaSeveritySuiteNone

IDCheckFeatureSeverity

AZDO.1000Azure DevOps OAuth apps can access resources in your organization through OAuth.New in 3.0Security policiesHighAZDO.1001Identities can connect to your organization's Git repos through SSH.New in 3.0Security policiesHighAZDO.1002Log Audit Events.New in 3.0AuditingHighAZDO.1003Restrict public projects.New in 3.0Security policiesHighAZDO.1004Additional protections when using public package registries.New in 3.0Security policiesHighAZDO.1005IP Conditional Access policy validation.New in 3.0Security policiesHighAZDO.1010Audit streaming.New in 3.0AuditingHighAZDO.1013Organization Owner should not be an individual.New in 3.0Users and accessHighAZDO.1015Limit variables that can be set at queue time.New in 3.0PipelinesHighAZDO.1016Limit job authorization scope to current project for non-release pipelines.New in 3.0PipelinesHighAZDO.1017Limit job authorization scope to current project for classic release pipelines.New in 3.0PipelinesHighAZDO.1018Protect access to repositories in YAML pipelines.New in 3.0PipelinesHighAZDO.1022Limit building pull requests from forked GitHub repositories.New in 3.0PipelinesHighAZDO.1023Disable Marketplace tasks.New in 3.0PipelinesHighAZDO.1025Enable shell tasks arguments validation.New in 3.0PipelinesHighAZDO.1030Project Collection Administrators.New in 3.0Users and accessHighAZDO.1031Validate SSH Key Expiration.New in 3.0Security policiesHighAZDO.1032(Tenant) Restrict creation of global Personal Access Tokens.New in 3.0Security policiesHighAZDO.1033(Tenant) Enable automatic revocation of leaked Personal Access Tokens.New in 3.0Security policiesHighAZDO.1035(Tenant) Restrict Personal Access Token lifespan.New in 3.0Security policiesHighAZDO.1036(Tenant) Restrict Personal Access Token full scope.New in 3.0Security policiesHighAZDO.1037(Organization) Restrict Personal Access Token creation.New in 3.0Security policiesHighAZDO.1040(Organization) Secret Protection: existing repositories enrolled.New in 3.0RepositoriesHighAZDO.1041(Organization) Secret Protection: push protection blocks secret commits.New in 3.0RepositoriesHighAZDO.1006External Users access.New in 3.0Users and accessMediumAZDO.1007Team and project administrator are allowed to invite new users.New in 3.0Users and accessMediumAZDO.1014Anonymous access to pipeline badges.New in 3.0PipelinesMediumAZDO.1019Stage chooser.New in 3.0PipelinesMediumAZDO.1020Creation of classic build pipelines.New in 3.0PipelinesMediumAZDO.1021Creation of classic release pipelines.New in 3.0PipelinesMediumAZDO.1024Disable Node 6 tasks.New in 3.0PipelinesMediumAZDO.1026Enable automatic enrollment to Advanced Security for Azure DevOps.New in 3.0RepositoriesMediumAZDO.1028Disable creation of TFVC repositories.New in 3.0RepositoriesMediumAZDO.1034(Tenant) Restrict creation of new Azure DevOps organizations.New in 3.0Organization policiesMediumAZDO.1038(Organization) Disallow extensions from accessing resources on the local network.New in 3.0Security policiesMediumAZDO.1039(Organization) Secret Protection: new repositories enrolled automatically.New in 3.0RepositoriesMediumAZDO.1042(Organization) Code Security: new repositories enrolled automatically.New in 3.0RepositoriesMediumAZDO.1043(Organization) Code Security: existing repositories enrolled.New in 3.0RepositoriesMediumAZDO.1044(Organization) Code Security: dependency and CodeQL alerts enabled.New in 3.0RepositoriesMediumAZDO.1008Request access to Azure DevOps by e-mail notifications to administrators.New in 3.0Users and accessLowAZDO.1027Disable showing Gravatar images for users outside of your enterprise.New in 3.0RepositoriesLowAZDO.1009Feedback Collection.New in 3.0Organization policiesInfoAZDO.1011Project Resource Limits.New in 3.0Resource usage and limitsInfoAZDO.1012Work Items Tags Limits.New in 3.0Resource usage and limitsInfoAZDO.1029Storage Usage Limit.New in 3.0Resource usage and limitsInfoAZDO.1045(Organization) Copilot code review: allowed for repositories.New in 3.0-IncludePreviewRepositoriesInfo