Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 68 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS1310	Enable Advanced Security for new Repositories	AzureDevOps	project	Severityhigh
DOS2130	A project must have at least 2 and no more than 5 administrators	AzureDevOps	project	Severitymedium
DOS2135	Pipeline Protected Resources - Checks - Require approvals on each production environment	AzureDevOps	project	Severityhigh
DOS2140	Pipeline Protected Resources - Checks - Configure a protected branch check on each production environment	AzureDevOps	project	Severityhigh
DOS2145	Pipeline Protected Resources - Checks - Protect your production environment with approvals and checks	AzureDevOps	project	Severityhigh
DOS2150	Pipeline Protected Resources - Checks - Require approvals on each production service connection	AzureDevOps	project	Severityhigh
DOS2152	Pipeline Protected Resources - Checks - Configure a protected branch check on each production service connection	AzureDevOps	project	Severityhigh
DOS2155	Pipeline Protected Resources - Checks - Protect your production service connection with approvals and checks	AzureDevOps	project	Severityhigh
DOS2160	Pipeline Settings - Disable anonymous access to badges	AzureDevOps	project	Severitylow
DOS2165	Pipeline Settings - Disable building pull requests from forked repositories	AzureDevOps	project	Severitycritical
DOS2170	Pipeline Settings - Disable creation of classic build pipelines	AzureDevOps	project	Severitymedium
DOS2180	Pipeline Settings - Disable creation of classic release pipelines	AzureDevOps	project	Severitymedium
DOS2190	Pipeline Settings - Disable implied YAML CI trigger to prevent unintended pipeline runs	AzureDevOps	project	Severitylow
DOS2195	Pipeline Settings - Enable shell tasks arguments validation	AzureDevOps	project	Severityhigh
DOS2200	Pipeline Settings - Enforce job authorization scope to current project for non-release pipelines	AzureDevOps	project	Severitycritical
DOS2210	Pipeline Settings - Enforce access to repositories in YAML pipelines.	AzureDevOps	project	Severitycritical
DOS2220	Pipeline Settings - Enforce job authorization scope to current project for release pipelines	AzureDevOps	project	Severitycritical
DOS2230	Pipeline Settings - Limit variables that can be set at queue time	AzureDevOps	project	Severityhigh
DOS2240	Pipeline Retention Policy - Days to keep Artifacts (>= 30)	AzureDevOps	project	Severitylow
DOS2250	Pipeline Retention Policy - Days to keep Pull Request Runs (>= 10)	AzureDevOps	project	Severitylow

DevOps Shield

project Security Rules

Security and compliance rules in the project category. DevOps Shield helps you detect and remediate these findings across Azure DevOps, GitHub, and GitLab.