It inherently could be a target for Remote Code Execution (RCE) attacks. The Azure Pipelines agent is a software product designed to execute code it downloads from external sources. The folders controlled by the agent should be restricted to as few users as possible and they contain secrets that could be decrypted or exfiltrated. The user configuring the agent needs pool admin permissions, but the user running the agent does not. Information security for self-hosted agents You should run agent setup manually the first time.Īfter you get a feel for how agents work, or if you want to automate setting up many agents, consider using unattended config.
Osx versions install#
If you're building from a Subversion repo, you must install the Subversion client on the machine. Extract the contents of TEE-CLC-14.135.0 folder to /externals/tee.Download TEE-CLC version 14.135.0 manually from Team Explorer Everywhere GitHub releases.This variable prevents the agent from removing the TEE plugin after TFVC repository checkout. Set DISABLE_TEE_PLUGIN_REMOVAL environment or pipeline variable to true.If you're using a self-hosted agent and facing issues with TEE downloading, you may install TEE manually: The TEE plugin will be downloaded from this address. If the agent is running behind a proxy or a firewall, you'll need to ensure access to the following site. Note: You may notice your checkout task taking a long time to start working because of this download mechanism.
0 kommentar(er)
