Shulou(Shulou.com)11/24 Report--

CTOnews.com, May 24 / PRNewswire-Asianet /-- Microsoft announced the release of a public preview of GitHub Advanced Security for Azure DevOps as part of the Build 2023 developer conference.

Microsoft said in its blog post:

"GitHub Advanced Security for Azure DevOps brings the same developer security features to Azure DevOps as GitHub Advanced Security, which integrates directly into Azure Repos and Azure Pipelines, including the same secret scanning, dependency scanning, and CodeQL code scanning capabilities available in GitHub Enterprise."

Secret scanning helps developers who are afraid of exposing confidential credentials. "50% of all security vulnerabilities are caused by credential exposure."

Use the features in GitHub Advanced Security for Azure DevOps to find any previously released secrets or to block them before they are leaked.

"depending on the scope of use of the secret, this can take days of effort and pressure-if you miss rotating the secret in only one of the places where the secret is used, it can lead to an outage of the real-time site. On the other hand, if you prevent the secret from being exposed during push, it is easier to clean up your submission and re-push before it is persisted in Azure Repos."

The new GitHub service can also discover any open source package vulnerabilities by relying on scanning. In addition, it uses the CodeQL static analysis engine to allow developers to discover hundreds of security issues in various code languages.

GitHub Advanced Security for Azure DevOps billing is handled through Azure, and each active submitter costs $49 per month (CTOnews.com Note: currently about RMB 346). For more information, click here.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.