🙏 Azure DevOps tests

[SebastianClaesson]

Describe the feature

The ability to connect to the Azure DevOps rest apis to test Organizational security configuration, to verify a good security posture.
Based on https://learn.microsoft.com/en-us/azure/devops/organizations/security/security-overview?view=azure-devops and experience.

How will this feature enhance your project and further the project’s overall goals? Who will benefit from this feature (i.e. all users, the project team)?
All the consumers of Azure DevOps (not on-premise solution) will get a report of their security posture regarding Azure DevOps.

Additional context

Based on the PowerShell module; https://github.com/AZDOPS/AZDOPS

[SamErde]

Thanks, @SebastianClaesson! This has been on my wish list as well. Would you, @bjompen, and @JohnRoos be interested in drafting a PR for this feature? I would be happy to collab with you.

[SebastianClaesson]

Thanks, @SebastianClaesson! This has been on my wish list as well. Would you, @bjompen, and @JohnRoos be interested in drafting a PR for this feature? I would be happy to collab with you.

I already have a branch with 30 tests available.
I am just conforming them into the standard used by the project - I started of a bit different, was hoping for it to be ready for today, but tomorrow I will open the PR! 😁

[SebastianClaesson]

@SamErde - I would really like your feedback on the PR.
Please also consider that some of the Azure DevOps rest api's used by https://github.com/AZDOPS/AZDOPS may be undocumented and could be changed by Microsoft without notice.

I understand that this might be an issue for the project - so if it's prefered I can create a new repo for the Azure DevOps Maester tests instead - that consumers may opt-in to and install as "custom" test :)

For example:
https://github.com/AZDOPS/AZDOPS/blob/de576995dccb5eccc01fe7c700847277c4975f7b/Source/Public/Get-ADOPSOrganizationCommerceMeterUsage.ps1#L28-L32

I've also not added Azure DevOps to Connect-Maester - as Connect-ADOPS have a mandatory parameter for Organisation, meaning that if Azure DevOps is to be used during the generation of the Maester report, the user must connect to Azure DevOps outside of Connect-Maester.
If you'd like, I can add a concept to Connect-Maester as well, introducing parametersets maybe to control the required parameters when All/AzureDevOps is selected.

[bjompen]

Supercool to see my pet project in action ;)
About this one:

I've also not added Azure DevOps to Connect-Maester - as Connect-ADOPS have a mandatory parameter for Organisation, meaning that if Azure DevOps is to be used during the generation of the Maester report, the user must connect to Azure DevOps outside of Connect-Maester.
If you'd like, I can add a concept to Connect-Maester as well, introducing parametersets maybe to control the required parameters when All/AzureDevOps is selected.

One option for ADOPS would be to add something like "if no org is given to Connect-ADOPS - look for environment variable" - much in the same way we check env: vars for unsupported APIs - if this would help. Just add a feature request in the ADOPS repo and we'll look in to it. (adding this should not be breaking, so it shouldn't be a biggie)