ABacchi035478 (Community Member) asked a question.
Azure Devops - IP Restrictions question
So we want to have IP restricitons for our API accounts- which is fine for our on-prem pipelines, however some teams are looking to use Azure Devops and of course get blocked with our existing restrictions. Does anyone know where I can find a list of IPs to expect Aaure Devops to come from to go to Veracode?
.png){kind=logo}
Hi @ABacchi035478 (Community Member), I just confirmed with @Stephen J., Veracode Support (Veracode, Inc.) -- yes! if your policy is to restrict IP address access, you can whitelist or allow the Veracode IP addresses that are in the Veracode Help Center. Just to be mindful that Veracode will not be responsible for the Microsoft IP addresses that you would be using. Here is the list of Veracode IP addresses to whitelist for specific types of Veracode scans: https://help.veracode.com/reader/kJC1iOtXp8N~rCtV8P9jhw/Rp~tIqwLXKfwnDaClRdb0w
Also, here is the Microsoft's list that you might already have: https://docs.microsoft.com/en-us/azure/devops/organizations/security/allow-list-ip-url?view=azure-devops
Let us know if this helps!