//Azure DevOps - Security Testing Guide (Ado-STG)
Pipeline Access Control
If you need help assessing the security of your Azure DevOps or organization, we offer a wide range of security services. So, always feel free to reach out at: Sales@enterprisesoftproducts.com
NOTICE: The Azure DevOps - Security Testing Guide (Ado-STG) is currently in BETA; this means that there might be substantial changes and some parts may contain errors or not be fully implemented.
Pipelines are how a developer specifies which commands should be run by a pipeline agent when deploying a piece of software. As you might expect restricting access to these and the variables used in the deployment process is key. This section contains methodology for testing approval gates for pipeline deployments and Azure variable groups.
- Testing for approval gates
- Testing for insecure variable group permissions
