DOS2330

Ensure project visibility is set to Private

DOS2330

AzureDevOps project critical builtIn

Description

Ensure project visibility is always private. Private projects require users to be granted access to the project and signed in to access the services. Learn more: https://docs.microsoft.com/en-us/azure/devops/organizations/public/make-project-public

Recommendation

1. Go to Project Overview -> Summary. 
2. On top right, make sure the project is labeled 'Private'.

Policy Rule

{
  "target": "ADOTeamProjectReference",
  "if": {
    "allOf": [
      {
        "resource": "ADOTeamProjectReference",
        "property": "Visibility",
        "operator": "equals",
        "value": "private"
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS2327 DOS2335 »
Rule Details
  • Rule ID: DOS2330
  • Code: ADO_Project_Private_Visibility
  • Platform: AzureDevOps
  • Category: project
  • Severity: critical
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions