Developer Best Practices - Structuring Your Repository for Static Web Apps

This post addresses a security risk in Azure Static Web Apps CI/CD pipelines where the pipeline YAML file could be exposed publicly if deployed from the root of the repository. The author resolves this by moving application files to a 'src' subfolder and updating the pipeline configuration to reference this new location, thereby preventing public access to the YAML file. It also highlights the importance of repository configuration and awareness of external exposure risks.