Can I check if someone downloaded my code? - security

A old user account had access to one of my repos and i didnt notice. Can I check in the logs if he downloaded my repo in any way? Thanks for the help

If you have a premium subscription you can view logged events in the audit logs. These events include project repository downloads.
https://docs.gitlab.com/ee/administration/audit_events.html#project-events

Related

Azure Developer Portal: How to update to new version

I know this question may sound silly. I would like to selfhost the developer portal. I am concerned about future updates/versions. How do you update to a new version. Does anyone have experience with this?
I assume you already know this documentation:
https://learn.microsoft.com/en-us/azure/api-management/developer-portal-self-host
Updating the portal requires to pull and integrate the changes from the github repo into your customized portal code (if you changed it).

Azure DevOps Extension Process on Delete

I'm developing Azure DevOps extension. When client download extension he can register in Azure Hub then his account is added to my database.
When the client delete extension his account should also be removed from my database.
How can I add process for Azure DevOps extension that can be triggered on uninstall / remove extension?
I don't think there is an API for this, but you can see uninstalls here in the Marketplace portal. I guess you could poll this, or figure out the underlying API that's being used. any integration against these APIs is unsupported.
https://marketplace.visualstudio.com/manage/publishers/{PublisherID}/extensions/{ExtensionID}/hub?_a=uninstall
Also, remember that for troubleshooting purposes people uninstall/reinstall extensions and they may need to reinstall as part of migration/upgrade scenarios for which their assumption is likely going to be that no data is lost in the progress.
It's probably best to ask for contact details, upon registration, monitor usage and warn that data will be removed after X days of no usage.

azure devops access log

I am looking to find access logs for azure devops to
1) List time and date of authorized users who have accessed the code repository
2) List the changes made for all of the the repository and by whom
3) Assuage audit fears of unauthorized users downloading the code
Looks like there is auditing capabilities slotted in the roadmap but I need something now. I tried using the azure portals activity logs but I get zero results for azure devops events
Note: we do not use Active Directory integration yet
Any help is greatly appreciated
For auditing repo changes, every write operation in source control is part of its history.
For limiting read access, you already know the solution, because you said you aren't using it yet: Azure AD. Limit access to within your organization.
For auditing access, as you said, there is no solution yet, it's on the backlog. The reason it's on the backlog is because there is no way to do it at the moment.

New Azure Billing System [duplicate]

This morning I am getting the following message "This account is on a deprecated billing system. Contact Support to move it to the new system." when I open my subscription blade in the portal. When I try to submit a billing support ticket it just hangs while trying to bring up a support plan, which should not be necessary for a billing question anyway. For now it appears that the subscription is still working, but this seems like it will go badly. Please advise.
Looks like there is an outage in Azure: https://twitter.com/AzureSupport/status/1036970068058562560. All you can do for now is wait.
There is simply no way to create a ticket in the technical assistance ticket portal, I get the same for the last 11 a.m.
I am having the same issue with one of the subscriptions I own. Getting the message: This account is on a deprecated billing system. Contact Support to move it to the new system.
By personal experience it should be a matter of waiting it out, since the resources on that subscription are completely offline and they are not even in the affected region. To follow progress on it go to status.azure.com or follow them on twitter Azure Support. 41 minutes ago, there is still no definite resolution.

How to get subscription details on azure portal.

I have recently updated my azure subscription and after that I am unable to see my content or resources on the Azure portal and unable to download the publish profile.
So please help me to find the latest subscription in the new azure portal.
From the top right end, you will have your profile. There you will be able to see the Active Directories available for you. Click on that and it will show a page containing info on "Directories+ Subscriptions". In case you are not able to see the respective subscription in any of those directories, it is requested to raise a Support ticket in the portal itself.
You should ask azure support to help you with this. They can see what you have registered in the portal and if something when wrong. One thing you can try is to open the portal in a private browser session to see if anything is cached or not.

Resources