-
-
Notifications
You must be signed in to change notification settings - Fork 2
Azure.DevOps.Pipelines.Core.NoPlainTextSecrets
github-actions edited this page Oct 21, 2023
·
2 revisions
category: Microsoft Azure DevOps Pipelines severity: Critical online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Core.NoPlainTextSecrets.md
Build pipeline variables should not contain secrets in plain text.
Build pipeline variables should not contain secrets in plain text. Secrets should be stored in Azure Key Vault and referenced in the variable group. This will prevent the secret from being exposed in the build logs. If the secret is stored in plain text, it will be exposed in the build logs.
Mininum TokenType: ReadOnly
Consider storing secrets in Azure Key Vault and referencing them in the variable group.