You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: release-notes/2023/includes/ghazdo/sprint-228-update.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ ms.topic: include
7
7
8
8
### Changes to Code Scanning (CodeQL) user input task and variables
9
9
10
-
All user-provided inputs are now specified in the CodeQL Initialize task, which is responsible for configuring the CodeQL analysis environment used for code analysis with CodeQL `AdvancedSecurity-Codeql-Init@1``. See the [configure GitHub Advanced Security for Azure DevOps features documentation](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml) for more information on configuring GitHub Advanced Security for Azure DevOps.
10
+
All user-provided inputs are now specified in the CodeQL Initialize task, which is responsible for configuring the CodeQL analysis environment used for code analysis with CodeQL `AdvancedSecurity-Codeql-Init@1``. See the [configure GitHub Advanced Security for Azure DevOps features documentation](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml&preserve-view=true) for more information on configuring GitHub Advanced Security for Azure DevOps.
11
11
12
12
In addition, user inputs take precedence over any values set by variables. For instance, if you establish the language variable as `advancedsecurity.codeql.language: Java` and subsequently, during the CodeQL initialization phase, you specify the language as an input with `Language: cpp,` the input `cpp` will override the variable `Java` for the language. Please ensure that your inputs are configured accurately.
13
13
@@ -21,13 +21,13 @@ Below are the require task for code scanning.
21
21
> 
22
22
23
23
24
-
For more information, please refer to the set up code scanning [documentation](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#set-up-code-scanning).
24
+
For more information, please refer to the set up code scanning [documentation](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#set-up-code-scanning&preserve-view=true).
25
25
26
26
### CodeQL code scanning now supports Swift
27
27
28
28
We're expanding our support for CodeQL code scanning to include Swift! This means that developers working on Swift libraries and applications for Apple platforms can now take advantage of our top-notch code security analysis. Our current capabilities include the detection of issues such as path injection, risky web view fetches, various cryptographic misuses, and other forms of unsafe handling or processing of unfiltered user data.
29
29
30
30
Swift is now part of our roster of supported programming languages, which includes C/C++, Java/Kotlin, JavaScript/TypeScript, Python, Ruby, C#, and Go. Altogether, these languages enable us to perform nearly 400 comprehensive checks on your code, all while maintaining a low rate of false positives and ensuring high precision.
31
31
32
-
See the [configure GitHub Advanced Security for Azure DevOps features documentation](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml) for more information on configuring GitHub Advanced Security for Azure DevOps for your repositories.
32
+
See the [configure GitHub Advanced Security for Azure DevOps features documentation](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml&preserve-view=true) for more information on configuring GitHub Advanced Security for Azure DevOps for your repositories.
Copy file name to clipboardExpand all lines: release-notes/2024/includes/artifacts/sprint-246-update.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,9 +7,9 @@ ms.topic: include
7
7
8
8
### Authentication to Azure Artifacts using a public feed and Cargo
9
9
10
-
Due to a limitation with the Cargo client, authentication was all-or-nothing. For private feeds, authentication would be sent, but for [public feeds](/azure/devops/artifacts/tutorials/share-packages-publicly?view=azure-devops&tabs=nuget), which need to allow for anonymous users, no authentication would be sent, even if it was available or needed.
10
+
Due to a limitation with the Cargo client, authentication was all-or-nothing. For private feeds, authentication would be sent, but for [public feeds](/azure/devops/artifacts/tutorials/share-packages-publicly?view=azure-devops&tabs=nuget&preserve-view=true), which need to allow for anonymous users, no authentication would be sent, even if it was available or needed.
11
11
12
-
Now, authenticated users can connect to a public Azure Artifacts feed, just as they would a private feed. If you or your pipeline agent have [permission to save packages from upstream sources](/azure/devops/artifacts/feeds/feed-permissions?view=azure-devops#permissions-table), you can access packages from crates.io through the feed. This change gives control of what packages can come into a feed back in the hands of feed administrators. Once packages are brought into the feed from an upstream source, anonymous users will have access to them.
12
+
Now, authenticated users can connect to a public Azure Artifacts feed, just as they would a private feed. If you or your pipeline agent have [permission to save packages from upstream sources](/azure/devops/artifacts/feeds/feed-permissions?view=azure-devops#permissions-table&preserve-view=true), you can access packages from crates.io through the feed. This change gives control of what packages can come into a feed back in the hands of feed administrators. Once packages are brought into the feed from an upstream source, anonymous users will have access to them.
13
13
14
-
To ensure authentication, append `~force-auth` to the feed name in your registry URL. You can find out more details through [our public documentation](/azure/devops/artifacts/cargo/cargo-upstream-source?view=azure-devops&tabs=publicfeed%2CWindows%2CPowerShell#connect-to-your-feed).
14
+
To ensure authentication, append `~force-auth` to the feed name in your registry URL. You can find out more details through [our public documentation](/azure/devops/artifacts/cargo/cargo-upstream-source?view=azure-devops&tabs=publicfeed%2CWindows%2CPowerShell#connect-to-your-feed&preserve-view=true).
Copy file name to clipboardExpand all lines: release-notes/2024/includes/boards/sprint-234-update.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,7 @@ When you go to the work item, the corresponding Development and Deployment contr
42
42
> [!div class="mx-imgBorder"]
43
43
> 
44
44
45
-
If you decide to [connect a GitHub repo to Azure Boards](/azure/devops/boards/github/?view=azure-devops&preserve-view=true), the Development control for GitHub repos will be displayed.
45
+
If you decide to [connect a GitHub repo to Azure Boards](/azure/devops/boards/github/?view=azure-devops&preserve-view=true), the Development control for GitHub repos will be displayed.
46
46
47
47
> [!div class="mx-imgBorder"]
48
48
> 
Copy file name to clipboardExpand all lines: release-notes/2024/includes/general/sprint-234-update.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,4 +17,4 @@ Every five years, it's essential to update the **Client Secret** for your Azure
17
17
> [!div class="mx-imgBorder"]
18
18
> 
19
19
20
-
Look for this new functionality in each of your Azure DevOps app pages that can be accessible through [your profile here](https://app.vssps.visualstudio.com/_signin?realm=app.vssps.visualstudio.com&reply_to=https%3A%2F%2Fapp.vssps.visualstudio.com%2Fprofile%2Fview&redirect=1&context=eyJodCI6MywiaGlkIjoiYTVjYTM1ZWItMTQ4ZS00Y2NkLWJiYjMtZDMxNTc2ZDc1OTU4IiwicXMiOnt9LCJyciI6IiIsInZoIjoiIiwiY3YiOiIiLCJjcyI6IiJ90#ctx=eyJTaWduSW5Db29raWVEb21haW5zIjpbImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSIsImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSJdfQ2). Learn more about this new step in our [Azure DevOps OAuth guide](/azure/devops/integrate/get-started/authentication/azure-devops-oauth?view=azure-devops&preserve-view=tru).
20
+
Look for this new functionality in each of your Azure DevOps app pages that can be accessible through [your profile here](https://app.vssps.visualstudio.com/_signin?realm=app.vssps.visualstudio.com&reply_to=https%3A%2F%2Fapp.vssps.visualstudio.com%2Fprofile%2Fview&redirect=1&context=eyJodCI6MywiaGlkIjoiYTVjYTM1ZWItMTQ4ZS00Y2NkLWJiYjMtZDMxNTc2ZDc1OTU4IiwicXMiOnt9LCJyciI6IiIsInZoIjoiIiwiY3YiOiIiLCJjcyI6IiJ90#ctx=eyJTaWduSW5Db29raWVEb21haW5zIjpbImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSIsImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSJdfQ2). Learn more about this new step in our [Azure DevOps OAuth guide](/azure/devops/integrate/get-started/authentication/azure-devops-oauth?view=azure-devops&preserve-view=true).
Copy file name to clipboardExpand all lines: release-notes/2024/includes/general/sprint-246-update.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,9 +14,9 @@ In response to your feedback in the [developer community](https://developercomm
14
14
15
15
### Microsoft Entra profile information (preview)
16
16
17
-
We’re excited to introduce the integration of Microsoft Entra profile information in Azure DevOps, removing the need for separate profile updates. To try the preview, enable Microsoft Entra profile information in [Preview Features](/azure/devops/project/navigation/preview-features?view=azure-devops).
17
+
We’re excited to introduce the integration of Microsoft Entra profile information in Azure DevOps, removing the need for separate profile updates. To try the preview, enable Microsoft Entra profile information in [Preview Features](/azure/devops/project/navigation/preview-features?view=azure-devops&preserve-view=true).
18
18
19
19
> [!div class="mx-imgBorder"]
20
20
> 
21
21
22
-
Once enabled, your [profile settings](/azure/devops/organizations/settings/set-your-preferences?view=azure-devops#set-preferences) are read-only and automatically populated from Microsoft Entra. To revert to your previous settings or provide feedback, turn off the preview and share your comments.
22
+
Once enabled, your [profile settings](/azure/devops/organizations/settings/set-your-preferences?view=azure-devops&preserve-view=true#set-preferences) are read-only and automatically populated from Microsoft Entra. To revert to your previous settings or provide feedback, turn off the preview and share your comments.
Copy file name to clipboardExpand all lines: release-notes/2024/includes/ghazdo/sprint-234-update.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -30,7 +30,7 @@ New alert severities now exist for alert results from the CodeQL `quality` queri
30
30
31
31
### Linked Azure subscription required for GitHub Advanced Security for Azure DevOps enablement
32
32
33
-
If you previously enabled Advanced Security for repositories in an Azure DevOps organization without a linked Azure subscription, you may notice Advanced Security automatically disabled itself on those repositories. To re-enable Advanced Security, add an associated Azure subscription to the organization. For more information on how to add or change your subscription, see [Change Azure subscription](/azure/devops/organizations/billing/change-azure-subscription?view=azure-devopsthe&preserve-view=true).
33
+
If you previously enabled Advanced Security for repositories in an Azure DevOps organization without a linked Azure subscription, you may notice Advanced Security automatically disabled itself on those repositories. To re-enable Advanced Security, add an associated Azure subscription to the organization. For more information on how to add or change your subscription, see [Change Azure subscription](/azure/devops/organizations/billing/change-azure-subscription?view=azure-devops&preserve-view=true).
Copy file name to clipboardExpand all lines: release-notes/2024/includes/ghazdo/sprint-238-update.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,4 +16,4 @@ The security overview risk page now links directly to each repository's individu
16
16
17
17
The **AdvancedSecurity-Publish@1** task allows you to easily retrieve results from third-party providers, enhancing the integration with GitHub advanced security for AzureDevOps. These providers can include both open-source and commercial security analysis pipeline tasks that generate results in the conforming SARIF format. By leveraging this, you can now view the results within the Advanced Security Code Scanning alerts hub, providing a unified view of code security alerts from currently supported analysis tools directly within Azure DevOps. This integration supports SARIF 2.1, offering you a comprehensive overview of their security posture.
18
18
19
-
For detailed instructions on configuring code scanning in GitHub Advanced Security with Azure DevOps, see [Set up code scanning](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#set-up-code-scanning).
19
+
For detailed instructions on configuring code scanning in GitHub Advanced Security with Azure DevOps, see [Set up code scanning](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#set-up-code-scanning&preserve-view=true).
Copy file name to clipboardExpand all lines: release-notes/2024/includes/ghazdo/sprint-243-update.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,7 +21,7 @@ However, CodeQL, the static analysis engine behind GitHub Advanced Security for
21
21
22
22
For all compiled languages, the default build mode is **"manual."** However, for C# and Java, you can change the build mode to **"none."**
23
23
24
-
You can configure the build mode during the AdvancedSecurity-Codeql-Init@1 setup. For detailed instructions on configuring code scanning in GitHub Advanced Security with Azure DevOps, see Set up [code scanning](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#set-up-code-scanning)
24
+
You can configure the build mode during the AdvancedSecurity-Codeql-Init@1 setup. For detailed instructions on configuring code scanning in GitHub Advanced Security with Azure DevOps, see Set up [code scanning](/azure/devops/repos/security/configure-github-advanced-security-features?view=azure-devops&tabs=yaml#set-up-code-scanning&preserve-view=true)
25
25
26
26
Consideration:
27
27
- If **"none"** is selected and a language other than supported complied languages C# or Java, the pipeline task may not work as expected.
Copy file name to clipboardExpand all lines: release-notes/2025/includes/general/sprint-251-update.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ The **Generate Git Credentials** button has been removed from the **Clone Reposi
14
14
> [](../../media/251-general-01.png#lightbox)
15
15
16
16
17
-
To enhance security and streamline authentication, consider using Entra tokens for ad-hoc Git clone operations in Repos and Wiki. Documentation is available to help you configure authentication via the [command line](/azure/devops/repos/git/auth-overview?view=azure-devops&tabs=Windows) or within the [Git Credential Manager](/azure/devops/repos/git/set-up-credential-managers?view=azure-devops) (GCM).
17
+
To enhance security and streamline authentication, consider using Entra tokens for ad-hoc Git clone operations in Repos and Wiki. Documentation is available to help you configure authentication via the [command line](/azure/devops/repos/git/auth-overview?view=azure-devops&tabs=Windows&preserve-view=true) or within the [Git Credential Manager](/azure/devops/repos/git/set-up-credential-managers?view=azure-devop&preserve-view=trues) (GCM).
18
18
19
19
While PATs remain available for Git operations, they must now be manually created with the appropriate `vso.code` scope from the Personal Access Token page. Ensure that PATs are only active as long as needed and revoked when no longer in use. As a best practice, store PATs securely in a secret management service such as Azure Key Vault (AKV) and rotate them regularly.
0 commit comments