Azure DevOps Project Limit Pipelines Authorization Scope

Ensure Azure DevOps projects limit the autorization scope of Azure Pipelines to the current project for release and non-release pipelines.

If the pipeline is in a public project, then the job authorization scope is automatically restricted to project no matter what you configure in any setting.

Examples

Insecure Example

Secure Example

More information

• Azure Devops - Azure Pipelines - Access repositories, artifacts, and other resources