Azure DevOps
46 checks from Mito: 24 High, 15 Medium, 2 Low, 5 Info.
| ID | Title | Severity | Suite |
|---|---|---|---|
| AZDO.1000 | Azure DevOps OAuth apps can access resources in your organization through OAuth. (not run by Mito) | High | Mito |
| AZDO.1001 | Identities can connect to your organization’s Git repos through SSH. (not run by Mito) | High | Mito |
| AZDO.1002 | Log Audit Events. (not run by Mito) | High | Mito |
| AZDO.1003 | Restrict public projects. (not run by Mito) | High | Mito |
| AZDO.1004 | Additional protections when using public package registries. (not run by Mito) | High | Mito |
| AZDO.1005 | IP Conditional Access policy validation. (not run by Mito) | High | Mito |
| AZDO.1006 | External Users access. (not run by Mito) | Medium | Mito |
| AZDO.1007 | Team and project administrator are allowed to invite new users. (not run by Mito) | Medium | Mito |
| AZDO.1008 | Request access to Azure DevOps by e-mail notifications to administrators. (not run by Mito) | Low | Mito |
| AZDO.1009 | Feedback Collection. (not run by Mito) | Info | Mito |
| AZDO.1010 | Audit streaming. (not run by Mito) | High | Mito |
| AZDO.1011 | Project Resource Limits. (not run by Mito) | Info | Mito |
| AZDO.1012 | Work Items Tags Limits. (not run by Mito) | Info | Mito |
| AZDO.1013 | Organization Owner should not be an individual. (not run by Mito) | High | Mito |
| AZDO.1014 | Anonymous access to pipeline badges. (not run by Mito) | Medium | Mito |
| AZDO.1015 | Limit variables that can be set at queue time. (not run by Mito) | High | Mito |
| AZDO.1016 | Limit job authorization scope to current project for non-release pipelines. (not run by Mito) | High | Mito |
| AZDO.1017 | Limit job authorization scope to current project for classic release pipelines. (not run by Mito) | High | Mito |
| AZDO.1018 | Protect access to repositories in YAML pipelines. (not run by Mito) | High | Mito |
| AZDO.1019 | Stage chooser. (not run by Mito) | Medium | Mito |
| AZDO.1020 | Creation of classic build pipelines. (not run by Mito) | Medium | Mito |
| AZDO.1021 | Creation of classic release pipelines. (not run by Mito) | Medium | Mito |
| AZDO.1022 | Limit building pull requests from forked GitHub repositories. (not run by Mito) | High | Mito |
| AZDO.1023 | Disable Marketplace tasks. (not run by Mito) | High | Mito |
| AZDO.1024 | Disable Node 6 tasks. (not run by Mito) | Medium | Mito |
| AZDO.1025 | Enable shell tasks arguments validation. (not run by Mito) | High | Mito |
| AZDO.1026 | Enable automatic enrollment to Advanced Security for Azure DevOps. (not run by Mito) | Medium | Mito |
| AZDO.1027 | Disable showing Gravatar images for users outside of your enterprise. (not run by Mito) | Low | Mito |
| AZDO.1028 | Disable creation of TFVC repositories. (not run by Mito) | Medium | Mito |
| AZDO.1029 | Storage Usage Limit. (not run by Mito) | Info | Mito |
| AZDO.1030 | Project Collection Administrators. (not run by Mito) | High | Mito |
| AZDO.1031 | Validate SSH Key Expiration. (not run by Mito) | High | Mito |
| AZDO.1032 | (Tenant) Restrict creation of global Personal Access Tokens. (not run by Mito) | High | Mito |
| AZDO.1033 | (Tenant) Enable automatic revocation of leaked Personal Access Tokens. (not run by Mito) | High | Mito |
| AZDO.1034 | (Tenant) Restrict creation of new Azure DevOps organizations. (not run by Mito) | Medium | Mito |
| AZDO.1035 | (Tenant) Restrict Personal Access Token lifespan. (not run by Mito) | High | Mito |
| AZDO.1036 | (Tenant) Restrict Personal Access Token full scope. (not run by Mito) | High | Mito |
| AZDO.1037 | (Organization) Restrict Personal Access Token creation. (not run by Mito) | High | Mito |
| AZDO.1038 | (Organization) Disallow extensions from accessing resources on the local network. (not run by Mito) | Medium | Mito |
| AZDO.1039 | (Organization) Secret Protection: new repositories enrolled automatically. (not run by Mito) | Medium | Mito |
| AZDO.1040 | (Organization) Secret Protection: existing repositories enrolled. (not run by Mito) | High | Mito |
| AZDO.1041 | (Organization) Secret Protection: push protection blocks secret commits. (not run by Mito) | High | Mito |
| AZDO.1042 | (Organization) Code Security: new repositories enrolled automatically. (not run by Mito) | Medium | Mito |
| AZDO.1043 | (Organization) Code Security: existing repositories enrolled. (not run by Mito) | Medium | Mito |
| AZDO.1044 | (Organization) Code Security: dependency and CodeQL alerts enabled. (not run by Mito) | Medium | Mito |
| AZDO.1045 | (Organization) Copilot code review: allowed for repositories. (not run by Mito) | Info | Mito |
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.