Azure DevOps Blog

DevOps, Git, and Agile updates from the team building Azure DevOps

Security - Azure DevOps Blog

New IP firewall rules for Azure DevOps Services

May 31, 2019 May 31, 2019 05/31/19
Whitney Jenkins
Azure DevOps is currently investing in enhancing its routing structure. As a result of this enhancement, our IP address space will be changing. If you're currently using firewall rules to allow traffic to Azure DevOps, please be sure to update these rules to account for our new IP ranges.

A Microsoft DevSecOps Static Application Security Testing (SAST) Exercise

August 21, 2018 Aug 21, 2018 08/21/18
Michael C. Fanning
Static Application Security Testing (SAST) is a critical DevSecOps practice. As engineering organizations accelerate continuous delivery to impressive levels, it’s important to ensure that continuous security validation keeps up. To do so most effectively requires a multi-dimensional application of static analysis tools. The more customizable the tool, the better you can shape it to your actual security risk.

Protecting our users from the ESLint NPM package breach

July 18, 2018 Jul 18, 2018 07/18/18
Rajesh Ramamurthy (MSFT)
On the 12th of July 2018, malicious code was detected in two popular open-source NPM packages, eslint-scope (version 3.7.2) and eslint-config-eslint (version 5.0.2). As a result, developers who downloaded and installed these packages may have had credentials stored in their .npmrc file compromised. This may include credentials required to ...

If I am a VSTS Stakeholder, can I also be an Admin?

July 5, 2018 Jul 5, 2018 07/5/18
Paris Morgan
Today, we’re excited to announce that users with the Stakeholder access level can now be administrators in Visual Studio Team Services (VSTS). With these upcoming changes, Stakeholders can administer access levels, permissions, and settings – if they have been granted permissions to do so. Previously, they were only able to invite users ...