DOS1320

Enable Advanced Security

DOS1320

AzureDevOps repository high builtIn

Description

Enable Advanced Security for your repository. A shield icon appears in the repository view for any repository with Advanced Security enabled. You can enable Advanced Security at the organization, project, or repository level. To access each of the scanning tools and results, you need to first enable Advanced Security. Advanced Security is billed based on the number of unique active committers across all enabled repositories in your subscription. Learn more: https://learn.microsoft.com/en-us/azure/devops/repos/security/configure-github-advanced-security-features

Recommendation

1. Go to Project Settings. 
2. Select Repos -> Repositories. 
3. Select the repository you want to enable Advanced Security for. 
4. Turn 'On' the setting 'Advanced Security'.

Policy Rule

{
  "target": "ADORepositoryAdvancedSecurityEnablement",
  "if": {
    "allOf": [
      {
        "resource": "ADORepositoryAdvancedSecurityEnablement",
        "property": "AdvSecEnabled",
        "operator": "equals",
        "value": true
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS1310 DOS1330 »
Rule Details
  • Rule ID: DOS1320
  • Code: ADO_Project_Repository_AdvancedSecurity_Enable_For_Repo
  • Platform: AzureDevOps
  • Category: repository
  • Severity: high
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions