Blog Post

Microsoft Developer Community Blog
6 MIN READ

Protect production branches from having secrets through an Azure DevOps branch policy

Jamesdld23's avatar
Jamesdld23
Iron Contributor
Apr 01, 2023
Introduction The objective of this article is to share a strategy that has been implemented for a client that asked how we can protect its production branches from having secrets in code.   Aft...
Updated Dec 02, 2023
Version 6.0
best practices
CodeStories
tips and tricks
Jamesdld23's avatar
Jamesdld23
Iron Contributor
May 29, 2023

Hi fcl39 ,

that's a very good question! CredScan is a tool developed and maintained by Microsoft, I didn't see any related issue on their GitHub repo but they I assume they are definitively aware of that :).

 

There is no additional cost when using the extension.

Regards,

James