Azure Devops Library Variables Audit

[Minotaur_UK]

HI,

This maybe a difficult question to answer but we are currently developing an ALM strategy with regards to D365 CE.  We have had historically 3rd party suppliers deliver our customisations and support via Devops pipelines.  The 3rd party suppliers have used various variable groups, some of which we are unsure what they are used for.

Are there any tools which can determine where these variables are used ?  Or has anyone with any experience of auditing variable groups used tools or processes which they can direct me towards ?

Any help or advice is appreciated.  TIA

[#2]

@Minotaur_UK 

I use SonarQube for my analysis:

https://www.sonarsource.com/solutions/security/?s_campaign=SQ-APAC-Generic&s_content=Security&s_term...

[#3]

@Kidd_Ip 

Great thanks, I will take a look.