dependency-check / dependency-check/azuredevops

Can you elaborate why the extension needs Build execute permissions?

Open
#129 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
53
Forks
35
PR merge metrics
No merged PRs in 30d

Description

![image](https://github.com/dependency-check/azuredevops/assets/97482564/1665439e-68f0-411e-a8d4-4bb06e0b8d3c)

Hi there,

we've noticed that the DevOps-extension needs "Build (read and _execute_)" permissions and we where wondering why the execute is needed.

Can someone elaborate?

Thanks!

Contributor guide

No contributing guide indexed for this repository

Research direction

No file or test is named. Start by reviewing the Azure DevOps extension's declared Build permissions and the build-related operations it uses, then determine whether execute access is required. Done means documenting the reason clearly or confirming that the permission can be reduced.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, typescript
Domain
devops, documentation, security
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.