category | severity | online version |
---|---|---|
Microsoft Azure DevOps Variable Groups |
Severe |
Variable group permissions should not be inherited from the project.
Variable group permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to sensitive information.
Mininum TokenType: FineGrained
Consider removing inherited permissions from the variable group and setting permissions explicitly.