Azure.DevOps.Pipelines.Settings.RequireCommentForPullRequestFromFork.md

category	severity	online version
Microsoft Azure DevOps Pipelines	Important	https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Settings.RequireCommentForPullRequestFromFork.md

Azure.DevOps.Pipelines.Settings.RequireCommentForPullRequestFromFork

SYNOPSIS

Project settings should require a comment for pull requests from a fork.

DESCRIPTION

Before building a fork, a member of the project should review the changes and approve the pull request. This can help prevent malicious code from being introduced into the project.

Mininum TokenType: ReadOnly

RECOMMENDATION

Consider requiring a comment for pull requests from a fork in the project settings.

LINKS

• Azure DevOps Security best practices - Repos and branches