-
-
Notifications
You must be signed in to change notification settings - Fork 7
Azure.DevOps.Pipelines.Environments.InheritedPermissions
github-actions edited this page Jan 20, 2024
·
1 revision
category: Microsoft Azure DevOps Environments severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Environments.InheritedPermissions.md
Environment permissions should not be inherited from the project.
Environment permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to sensitive information and resources.
Mininum TokenType: FineGrained
Consider removing inherited permissions from the environment and setting permissions explicitly.