Azure DevOps

Integrating Azure DevOps with Escape's ASM provides unprecedent Code-to-Cloud visibility by matching your Code Resolvers with your Cloud Resources, through API Discovery from Code.

Discovered Resources¶

The Azure DevOps integration automatically discovers and inventories the following resources from your Azure DevOps organization:

• Azure DevOps Repositories: All repositories within the organization or project scope
• API Schema Files: OpenAPI specifications, GraphQL schemas, Postman collections, and other API definition files found in repositories
• Extracted APIs: API endpoints and services defined in discovered schema files

The integration scans your repositories for API schema files, extracts API definitions, and automatically classifies them as Assets (APIs) in Escape's ASM. This enables Code-to-Cloud security monitoring by linking discovered APIs to their source repositories and enabling continuous testing as code changes.

Create a Personal Access Token¶

Create a new Personal Access Token in your Azure DevOps User Settings with the read permission in Code Scope.

Check out Azure DevOps's documentation on Personal Access Tokens.

Important: Copy the generated token immediately, as you won't be able to see it again!

Internal Networks and Services¶

When integrating with internal networks and services, you may need to:

• Configure a Private Location
• Whitelist FQDNs

For more information, see Private Locations.