1. Assessment Phase

  • Azure DevOps Security Assessment Execution
20 Credits

Azure DevOps Security Report

Overview

This report reviews DevOps Security across your selected Azure subscriptions using 8 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.

Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.

Assessment scope

  • Advisor — 8 checks

Example checks

  • Azure DevOps Repositories Should Have GitHub Advanced Security Enabled
  • Azure DevOps Projects Should Have Creation of Classic Pipelines Disabled
  • Azure Pipelines Should Not Have Secrets Available to Builds of Forks
  • Azure DevOps Repositories Should Have Secrets Scanning Findings Resolved
  • Azure DevOps Secure Files Should Not Grant Access to All Pipelines

Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.