Skip to content

Latest commit

 

History

History
27 lines (17 loc) · 888 Bytes

Azure.DevOps.Tasks.VariableGroup.InheritedPermissions.md

File metadata and controls

27 lines (17 loc) · 888 Bytes
category severity online version
Microsoft Azure DevOps Variable Groups
Severe

Azure.DevOps.Tasks.VariableGroup.InheritedPermissions

SYNOPSIS

Variable group permissions should not be inherited from the project.

DESCRIPTION

Variable group permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to sensitive information.

Mininum TokenType: FineGrained

RECOMMENDATION

Consider removing inherited permissions from the variable group and setting permissions explicitly.

LINKS