Brings GitHub, GitLab and Azure DevOps into Defender for Cloud, showing IaC, dependency, secret and code findings side by side. Problems are caught early, yet deployments that skip the pipeline are not blocked.
Also called Defender for DevOps, Defender for DevOps.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Defender for Cloud DevOps security in context, with comparison tables and the common traps.
Terms in this definition
- Azure DevOps
Microsoft's suite of DevOps services, among them Azure Boards and Azure Pipelines.
- IaC
Infrastructure as code means deploying resources from declarative files, for example Bicep or ARM templates.
- Secret
Object in Key Vault storing an arbitrary string value, for instance a password, API key or connection string.
- Pipeline
Groups activities logically so that, together, they move and transform data, either one after another or side by side; found in both Azure Data Factory and Microsoft Fabric.