From the course: Integrating Azure DevOps with GitHub
Unlock the full course today
Join today to access over 24,900 courses taught by industry experts.
Exploring project and pipeline security in Azure DevOps
From the course: Integrating Azure DevOps with GitHub
Exploring project and pipeline security in Azure DevOps
- [Instructor] Azure Pipelines is a great tool for automating build and deployments of applications, especially in this era of digital transformation. But it also poses unique security challenges. Pipeline can be used to run batch or partial scripts in your environments and for this reason, you have to ensure that pipelines are secured against unauthorized access. This will help prevent malicious code from being deployed in your environment and maintain tight control of what is deployed. As a DevOps Engineer, you have to assume that a breach is possible through your organization's DevOps platform, and then take the necessary steps to prevent a potential adversary from running malicious code in the pipeline. An adversaries goal may be to steal your organization's secrets or corrupt your production environments, or even log down your end points, like in the case of ransomware attacks. One of the best practices when…