Azure.DevOps.Pipelines.Settings.StatusBadgesPrivate

---

category: Microsoft Azure DevOps Pipelines severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Settings.StatusBadgesPrivate.md

Azure.DevOps.Pipelines.Settings.StatusBadgesPrivate

SYNOPSIS

Status badges should not be publicly accessible.

DESCRIPTION

Status badges are publicly accessible by default. This means anyone with the URL can view the status of a pipeline. Consider restricting access to status badges to prevent unauthorized access.

Mininum TokenType: ReadOnly

RECOMMENDATION

Consider restricting access to status badges to prevent unauthorized access.

LINKS

• Azure DevOps Security best practices