Azure Pipelines Validator

This validates Azure Pipelines YAML files locally before you push or merge. It checks syntax, security issues like hardcoded secrets or insecure commands, and best practices like missing display names or unpinned task versions. The script runs offline first and only hits docs when it can't resolve something locally, which is smart if you're in a locked-down environment or just want fast feedback. Reports come back in severity buckets: blocking, warning, info, skipped. It won't generate pipelines for you, just catch problems in existing ones. Good for CI gates or pre-commit hooks when you want deterministic validation without round-tripping to Azure DevOps.