-
-
Notifications
You must be signed in to change notification settings - Fork 7
Azure.DevOps.Tasks.VariableGroup.NoKeyVaultNoSecrets
github-actions edited this page Sep 18, 2023
·
5 revisions
category: Repository severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en-US/Azure.DevOps.Tasks.VariableGroup.NoKeyVaultNoSecrets.md
A variable group should not contain any secrets when it is not linked to a key vault.
A variable group should not contain any secrets when it is not linked to a key vault. This is because the secrets will be stored in plain text in the variable group and can be viewed by anyone with access to the variable group.
Consider removing any secrets from the variable group or replacing them with variables that are linked to a key vault.