Skip to content

Azure DevOps Project Limit Pipelines Authorization Scope

Ensure Azure DevOps projects limit the autorization scope of Azure Pipelines to the current project for release and non-release pipelines.

If the pipeline is in a public project, then the job authorization scope is automatically restricted to project no matter what you configure in any setting.


Insecure Example

Insecure Azure Pipelines Configuration

Secure Example

Secure Azure Pipelines Configuration

More information