category | severity | online version |
---|---|---|
Microsoft Azure DevOps Pipelines |
Severe |
Pipelines should not be assigned directly to the Project Valid Users group.
Pipelines should not be assigned directly to the Project Valid Users group. This group is inherited by all users in the project and will grant access to the pipeline to all users.
Mininum TokenType: FineGrained
Remove the Project Valid Users group from the pipeline acl.