Hi @Gent Reshtani​ 

As SPN is not recognized by Azure DevOps yet, we must use a service account for the repo part, all the other part should be still with SPN.

1. log in to Azure DevOps with service account, and create a PAT.
2. create a git credential for the SPN with the service account PAT: Git Credentials API 2.0 | Databricks on AWS.
3. From now on, each time a job running as SPN needs git operation, it will use automatically the bound git credential created in the step 2, which is the service account's PAT

Be aware that you need to refresh the PAT. and update the git crendential periodically.