Skip to content

Commit 224c1f5

Browse files
Merge pull request #268123 from laragoldstein13/docs-editor/container-image-mapping-1709662140
Update container-image-mapping.md
2 parents dacf474 + 825ac9c commit 224c1f5

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/defender-for-cloud/container-image-mapping.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,10 @@ When a vulnerability is identified in a container image stored in a container re
1414

1515
- An Azure account with Defender for Cloud onboarded. If you don't already have an Azure account, [create one for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
1616
- [Azure DevOps](quickstart-onboard-devops.md) or [GitHub](quickstart-onboard-github.md) environment onboarded to Microsoft Defender for Cloud.
17-
- For Azure DevOps, [Microsoft Security DevOps (MSDO) Extension](azure-devops-extension.md) installed on the Azure DevOps organization.
17+
- When an Azure DevOps environment is onboarded to Microsoft Defender for Cloud, the Microsoft Defender for DevOps Container Mapping will be automatically shared and installed in all connected Azure DevOps organizations. This will automatically inject tasks into all Azure Pipelines to collect data for container mapping.
18+
19+
- For Azure DevOps, [Microsoft Security DevOps (MSDO) Extension](azure-devops-extension.md) installed on the Azure DevOps organization.
20+
1821
- For GitHub, [Microsoft Security DevOps (MSDO) Action](github-action.md) configured in your GitHub repositories. Additionally, the GitHub Workflow must have "**id-token: write"** permissions for federation with Defender for Cloud. For an example, see [this YAML](https://github.com/microsoft/security-devops-action/blob/7e3060ae1e6a9347dd7de6b28195099f39852fe2/.github/workflows/on-push-verification.yml).
1922
- [Defender CSPM](tutorial-enable-cspm-plan.md) enabled.
2023
- The container images must be built using [Docker](https://www.docker.com/) and the Docker client must be able to access the Docker server during the build.

0 commit comments

Comments
 (0)