Pilot Azure Pipelines GitHub-hosted PAYG agents with measured queue time, cost per successful .NET run, policy checks, and a tested rollback.
Fix AzureStaticWebApp@0 Bash and Docker failures on self-hosted Windows agents with a source-backed preflight and split deployment job.
Keep .NET builds reliable on clean Azure agents: cache NuGet packages, authenticate feeds, validate committed locks on every run, and rebuild project assets.
Find global Azure DevOps PAT dependencies in .NET build and release workflows, replace them safely, and prove the old token can be revoked before December 1, 2026.
Bound .NET 11 test runs in Azure Pipelines, preserve every module’s results, and handle timeout and failure-limit exit codes without losing artifacts.
Find Azure Pipelines tasks that still depend on Node.js 6, 10, or 16, test the provider restriction, and migrate owned tasks to Node20_1 safely.
Prevent organization-level overrides with GitHub Advanced Security enforcement, then verify configuration scope and repository coverage before rollout.
Replace direct npm publishing with stage-only tokens, inspect the exact package, require 2FA approval, and keep release automation fail closed.
Use .NET 11 to run dotnet package update –vulnerable with TreatWarningsAsErrors, then verify the dependency diff under your full restore and test policy.
Migrate Azure Pipelines Linux container jobs to the safer Docker socket default, opt in only required jobs, and verify host-daemon access before builds.
