Skip to content

Protect access to repositories in YAML pipelines.

Why This Matters

Exposed YAML pipelines can allow unauthorized modifications to build and release processes, potentially introducing malicious code or configuration changes. Without protecting repository access, attackers could compromise your CI/CD pipeline and gain unauthorized access to sensitive source code.

What Aether365 Checks

Aether365 verifies that your Azure DevOps YAML pipelines have repository access controls configured to limit which repositories can be referenced. This check appears in the Aether365 dashboard under the microsoft-365 security checks section.

Was this page helpful?