Skip to content

Commit de5638a

Browse files
Merge pull request #273097 from j0tr/patch-29
Update recommendations-reference.md
2 parents 2545527 + cd941e9 commit de5638a

File tree

1 file changed

+0
-28
lines changed

1 file changed

+0
-28
lines changed

articles/defender-for-cloud/recommendations-reference.md

Lines changed: 0 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -1217,34 +1217,6 @@ Secure your storage account with greater flexibility using customer-managed keys
12171217

12181218
**Severity**: Medium
12191219

1220-
### [Code repositories should have code scanning findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/c68a8c2a-6ed4-454b-9e37-4b7654f2165f)
1221-
1222-
**Description**: Defender for DevOps has found vulnerabilities in code repositories. To improve the security posture of the repositories, it is highly recommended to remediate these vulnerabilities.
1223-
(No related policy)
1224-
1225-
**Severity**: Medium
1226-
1227-
### [Code repositories should have Dependabot scanning findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/822425e3-827f-4f35-bc33-33749257f851)
1228-
1229-
**Description**: Defender for DevOps has found vulnerabilities in code repositories. To improve the security posture of the repositories, it is highly recommended to remediate these vulnerabilities.
1230-
(No related policy)
1231-
1232-
**Severity**: Medium
1233-
1234-
### [Code repositories should have infrastructure as code scanning findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/2ebc815f-7bc7-4573-994d-e1cc46fb4a35)
1235-
1236-
**Description**: Defender for DevOps has found infrastructure as code security configuration issues in repositories. The issues shown below have been detected in template files. To improve the security posture of the related cloud resources, it is highly recommended to remediate these issues.
1237-
(No related policy)
1238-
1239-
**Severity**: Medium
1240-
1241-
### [Code repositories should have secret scanning findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/4e07c7d0-e06c-47d7-a4a9-8c7b748d1b27)
1242-
1243-
**Description**: Defender for DevOps has found a secret in code repositories. This should be remediated immediately to prevent a security breach. Secrets found in repositories can be leaked or discovered by adversaries, leading to compromise of an application or service. For Azure DevOps, the Microsoft Security DevOps CredScan tool only scans builds on which it has been configured to run. Therefore, results might not reflect the complete status of secrets in your repositories.
1244-
(No related policy)
1245-
1246-
**Severity**: High
1247-
12481220
### [Cognitive Services accounts should enable data encryption](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/cdcf4f71-60d3-540b-91e3-aa19792da364)
12491221

12501222
**Description**: This policy audits any Cognitive Services account not using data encryption. For each Cognitive Services account with storage, should enable data encryption with either customer managed or Microsoft managed key.

0 commit comments

Comments
 (0)