Forum Discussion

dparis's avatar
dparis
Copper Contributor
Aug 10, 2020
Solved

Security on Azure Devops Self Hosted agent

Hello,   Today I have discovered that is possible from the pipeline to deploy software directly on the agents without any kind of authentication, in my case I was able to deploy docker directly on ...
  • felixtsem5's avatar
    Dec 07, 2020

    You are essentially running the agent using a specific account (the one you used to install the agent). You will have to limit the permission of that account to disallow software installation.

     

    Felix.

Resources