Microsoft Defender for Cloud DevOps Security — quick notes
Defender for Cloud DevOps Security — quick notes
| Fact | Detail |
|---|---|
| Supported environments | Azure DevOps Services · GitHub Enterprise Cloud · GitLab SaaS |
| Core value | Central inventory/findings plus cloud-context prioritization |
| Scan-result paths | Provider-native scanning · Microsoft Security DevOps/SARIF · preview agentless scanning where supported |
| IaC mapping | Defender CSPM + Azure DevOps + IaCFileScanner + unique mapping tags |
| Plan boundary | Foundational capabilities differ from advanced paid Defender CSPM features |
Trap: connector discovery is not proof that the expected scanner and output path are configured.
Sources: https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-devops-introduction · https://learn.microsoft.com/en-us/azure/defender-for-cloud/devops-support · https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-azure-devops-extension · https://learn.microsoft.com/en-us/azure/defender-for-cloud/iac-vulnerabilities · https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-code-scanning · https://learn.microsoft.com/en-us/azure/defender-for-cloud/iac-template-mapping · https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-devops · https://learn.microsoft.com/en-us/azure/defender-for-cloud/github-advanced-security-deploy