Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 123 rule(s)

Rule ID	Name	Platform	Category	Severity
DOS1190	Enforce AAD Conditional Access	AzureDevOps	organization	high
DOS1200	Enable Log Audit Events	AzureDevOps	organization	high
DOS1210	Enable Additional protections when using public package registries	AzureDevOps	organization	critical
DOS1220	Disallow Guest Users	AzureDevOps	organization	critical
DOS1230	Disallow Request Access Token	AzureDevOps	organization	high
DOS1240	Disallow team and project administrators to invite new users	AzureDevOps	organization	high
DOS1300	Enable Advanced Security for new Projects	AzureDevOps	organization	high
DOS1310	Enable Advanced Security for new Repositories	AzureDevOps	project	high
DOS1320	Enable Advanced Security	AzureDevOps	repository	high
DOS1330	Enable Advanced Security - Secret Scanning - Block secrets on push	AzureDevOps	repository	high
DOS2130	A project must have at least 2 and no more than 5 administrators	AzureDevOps	project	medium
DOS2135	Pipeline Protected Resources - Checks - Require approvals on each production environment	AzureDevOps	project	high
DOS2140	Pipeline Protected Resources - Checks - Configure a protected branch check on each production environment	AzureDevOps	project	high
DOS2145	Pipeline Protected Resources - Checks - Protect your production environment with approvals and checks	AzureDevOps	project	high
DOS2150	Pipeline Protected Resources - Checks - Require approvals on each production service connection	AzureDevOps	project	high
DOS2152	Pipeline Protected Resources - Checks - Configure a protected branch check on each production service connection	AzureDevOps	project	high
DOS2155	Pipeline Protected Resources - Checks - Protect your production service connection with approvals and checks	AzureDevOps	project	high
DOS2160	Pipeline Settings - Disable anonymous access to badges	AzureDevOps	project	low
DOS2165	Pipeline Settings - Disable building pull requests from forked repositories	AzureDevOps	project	critical
DOS2170	Pipeline Settings - Disable creation of classic build pipelines	AzureDevOps	project	medium

DevOps Shield

Browse security rules for Azure DevOps, GitHub, and GitLab

Security Knowledge Base