AZDO.1028: Disable creation of TFVC repositories.
| ID | AZDO.1028 |
| Severity | Medium |
| Suite | Mito |
| Product | Azure DevOps |
| Feature | Repositories |
| Security area | Engineering systems |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Low |
| Reads from | Azure DevOps |
| Further reading | https://learn.microsoft.com/azure/devops/release-notes/roadmap/2024/no-tfvc-in-new-projects |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Creation of Team Foundation Version Control (TFVC) repositories should be disabled.
Rationale: Over the past several years, we added no new features to Team Foundation Version Control (TFVC). Git is the preferred version control system in Azure Repos. Furthermore, all the improvements we made in the past few years in terms of security, performance, and accessibility were only made to Git repositories.
Remediation action
Section titled “Remediation action”Enable the policy to disable the creation of TFVC repositories.
- Sign in to your organization.
- Choose Organization settings.
- Under the Repos section choose Repositories.
- In the All Repositories Settings section, toggle on “Disable creation of TFVC repositories”.
Results: Disable creation of TFVC repositories. You can still see and work on TFVC repositories created before.
Related links
Section titled “Related links”Mito check. Author: SebastianClaesson. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.