2
votes

How secure are the Azure Pipelines hosted Agents and can they be used for more sensitive tasks like code signing?

1

1 Answers

1
votes

Consider using container jobs to run your builds. This ensures that everything is done within a disposable container and removed once your task is over. You can inject secrets via Azure KeyVault.