Microsoft Azure DevOps

Iru connects to Azure DevOps to pull branch policy, pipeline security, and project permissions all from one place. It reads branch policy configuration, pipeline definitions, and service connection inventory directly.

Key Capabilities

• Confirm branch policies require a minimum number of reviewers
• Verify pipelines include security scanning
• Check that service connections are restricted to authorized users
• Show that build artifacts are scanned

Evidence Collected

• Branch policy configurations
• Pipeline definitions showing security steps
• User permission matrix for projects
• Service connection inventory
• Build and release approval gates

Learn more