Azure.DevOps.Repos.Branch.BranchPolicyAllowSelfApproval

---

category: Microsoft Azure DevOps Repos severity: Critical online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Repos.Branch.BranchPolicyAllowSelfApproval.md

Azure.DevOps.Repos.Branch.BranchPolicyAllowSelfApproval

SYNOPSIS

Change authors should not be allowed to approve their own changes.

DESCRIPTION

The branch policy should not allow creators to approve their own changes. This will help ensure that the code in the default branch is of a high quality and that the team's Git workflow is followed.

Mininum TokenType: ReadOnly

RECOMMENDATION

Consider disabling the option to allow creators to approve their own changes.

LINKS

• Create a branch policy
• Branch policies
• Azure DevOps Security best practices