Quick Notes166 words
Integrating GitHub repositories with Azure Pipelines — quick notes
GitHub ↔ Azure Pipelines — quick notes
| Fact | Detail |
|---|---|
| Recommended auth | GitHub App — runs as the Azure Pipelines identity |
| OAuth | Runs as your personal GitHub identity; access must remain active; no GitHub Checks |
| PAT | Third supported type, through a GitHub service connection; discouraged and narrowly scoped if necessary |
| GitHub App bonus | Integrates with GitHub Checks (build/test/coverage in the PR) |
| Install scope risk | "All repositories" grants token access to all, including private |
| New project/org fork-PR default | Disabled |
| Central fork modes | Disable, securely build, or customize |
| Secure mode | Team-member comment required; no secrets or normal-build permissions |
| Pipeline checkbox | Additional choice, subject to central policy |
Traps
- GitHub App and OAuth are not the only types: PAT is supported but discouraged.
- Fork PRs do not universally build: current behavior depends on central and pipeline settings.