Shulou(Shulou.com)11/24 Report--

CTOnews.com Sept. 21, Microsoft today issued a press release announcing the official launch of GitHub Advanced Security for Azure DevOps.

Microsoft first announced the security feature in October 2022 and launched a public preview in May this year, which allows developers to access functions such as secret scanning, dependency scanning and CodeQL code scanning in the Azure DevOps environment.

Microsoft said that since the launch of the public beta version in May this year, it has collected a large number of feedback and comments submitted by developers. One of the changes in the official version is that any Azure DevOps Project Collection Administrator (PCA) can enable Advanced Security protection and provide protection for its orgs / projects / repos through the Azure DevOps setting.

CTOnews.com previously reported that secret scanning helps developers who are afraid of exposing confidential credentials. "50% of all security vulnerabilities are due to credential exposure."

Use the features in GitHub Advanced Security for Azure DevOps to find any previously released secrets or to block them before they are leaked.

Depending on the scope of use of the secret, this can take days of effort and pressure-if you miss rotating the secret in only one of the places where the secret is used, it may cause real-time site disruption. On the other hand, if you prevent a secret from being exposed during a push, it is easier to clean up your submissions and re-push before it is persisted in Azure Repos.

Related readings:

Microsoft releases public preview version of GitHub Advanced Security for Azure DevOps

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.