Allow deployments based on branches linked to the run. Extend pipeline protection by configuring a protected branch check on each of your resources. This will automatically stop your pipeline from running on top of any user branches. Most pipelines need a second set of eyes look over changes (especially to the pipeline itself) before deploying to production. Checks allow you to pause the pipeline run until certain conditions are met. Learn more: https://learn.microsoft.com/en-us/azure/devops/pipelines/security/resources#checks https://learn.microsoft.com/en-us/azure/devops/pipelines/process/approvals https://learn.microsoft.com/en-us/azure/devops/pipelines/process/environments
1. Navigate to Project -> Pipelines -> Environments 2. Select an environment. 3. Click on 'Approvals and checks' tab. 4. Click on '+' button to add a new 'Branch control' check.
{
"target": "ADOProjectCheckConfiguration",
"if": {
"allOf": [
{
"resource": "ADOProjectCheckConfiguration",
"property": "Resource.Type",
"operator": "equals",
"value": "environment"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "Resource.Name",
"operator": "match",
"value": "$(POLICY_VAR_PROJECT_PROD_ENVIRONMENT_PATTERNS)"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "Type.Name",
"operator": "equals",
"value": "Task Check"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "BranchControl.DefinitionRef.Name",
"operator": "equals",
"value": "evaluatebranchProtection"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "BranchControl.Inputs.AllowedBranches",
"operator": "notEquals",
"value": "*"
}
]
},
"then": {
"effect": "Audit"
}
}Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions