jessehouwing 4d ago

Migrating from #AzureDevOps to #GitHub with Data Residency? These are the steps to rewire your #AzurePipelines so you can keep using them while you're converting them to #GitHubActions.

The steps aren't as simple as you might expect unfortunately.

https://jessehouwing.net/configure-azure-pipelines-app-in-ghe-com/

Configure Azure Pipelines app in ghe.com

I recently helped a client migrate from Azure DevOps to GitHub Enterprise Managed Users with Data Residency (ghe.com for short). And as part of the migration we rewired the exiting Azure Pipelines from the old repository located on Azure Repos to the new one on GitHub.

Scrum Bug
Alvin Ashcraft 🐿️Jun 4

How Microsoft is migrating repositories to GitHub

https://devblogs.microsoft.com/devops/how-microsoft-is-migrating-repositories-to-github/

#github #azuredevops #migration #softwareengineering

How Microsoft is migrating repositories to GitHub - Azure DevOps Blog

For the past decade, Azure DevOps has powered software development at Microsoft, supporting some of our largest repositories and most complex engineering

Azure DevOps Blog
Kontak RecruitmentMay 12

Intermediate Full Stack Developer (JB6056)
Hybrid, Bryanston & Isando
R50 000 to R60 000 a month CTC

#FullStackDeveloper #Angular #CSharp #DotNet #PostgreSQL #SQL #APIDevelopment #AzureDevOps #SoftwareEngineering

Apply: https://bit.ly/IntermedFullStackDevJB6056

Simon Foster 🖖May 8
Automate your PRs for seamless branch updates! Discover how to streamline code merges using GitHub Actions & Azure DevOps. https://www.funkysi1701.com/posts/2024/automatic-pull-requests/ #AzureDevOps #PullRequests #Automation #PowerShell #CI/CD #DevOps
Automatic Pull Requests

Creating pull requests is part of the development process when working with version control systems like Git. Pull requests allow developers to propose…

Funky Si's Blog
OffSequenceMay 8
🚨 CVE-2026-42826 (CRITICAL, CVSS 10.0) in Azure DevOps exposes sensitive data to unauthorized actors remotely. Microsoft has released a fix — ensure your environment is fully updated. More info: https://radar.offseq.com/threat/cve-2026-42826-cwe-200-exposure-of-sensitive-infor-a9bb0e45 #OffSeq #AzureDevOps #Vuln #InfoSec
Florian  Apr 30

I just noticed a new(?) checkbox when creating a PR from main to qa in #AzureDevops: "Set auto-complete"

I was so naive to think it will just sets the new PR to auto-complete (if all checks are green).
But no, of course not, this is #Microsoft Enterprise Software.

What it actually did was complete the PR as expected ... and automatically delete the source branch! And it didn't even care that the main branch was PROTECTED!

https://developercommunity.microsoft.com/t/11070507#T-N11070920

OneWheelGeekApr 30

Ah yes, Azure DevOps—
where every git fetch is a thrilling game of chance.

Will it work? Will it hang?
Will SSH just… silently time out for 3 minutes?

Modern SSH keys? Absolutely not.
But intermittent connection failures?
Delivered reliably, several times a day.

#Azure #AzureDevOps

holgerMar 29

Azure DevOps is moving some auth flows to Entra token issuance this summer, so token payloads will stop being readable by clients.

The exact mechanism isn’t specified (JWE would be my guess), but anything decoding tokens to read claims like UPN or tenant ID will break — no graceful degradation.

Most likely to hit internal tooling and scripts, but worth a check either way.

Supported path: Azure DevOps REST APIs for user and org data.

https://devblogs.microsoft.com/devops/authentication-tokens-are-not-a-data-contract/

#AzureDevOps #DevOps #Entra

Authentication Tokens Are Not a Data Contract - Azure DevOps Blog

Authentication tokens exist to answer one question: is this caller authorized to do this? They are not intended to be a stable data interface, a schema you can depend on, or an input into application logic. If your application decodes tokens and reads claims from them, this is an important heads-up. Token Claims Were Never […]

Azure DevOps Blog
anchoreMar 16
We just updated our guide on integrating Anchore into your Azure DevOps pipelines! Learn how to use anchorectl for distributed analysis (local SBOM generation) or centralized analysis via a staging registry. Secure your software supply chain without slowing down your devs.
Read more: https://anchore.com/blog/anchore-azure-devops/
#DevSecOps #AzureDevOps #ContainerSecurity #SBOM
Integrating Anchore Security Scanning into Your Azure DevOps Pipeline | Anchore

With a few lines of yaml, add security to your Azure DevOps pipeline to keep non-compliant containers from reaching production environments.

Anchore
anchoreMar 7
Don't let un-scanned containers reach production. 📦🛡️
Our latest blog update shows you exactly how to add an Anchore security gate to your Azure DevOps pipeline using anchorectl.Automate SBOM generationEnforce policy complianceFail builds on high-risk vulnerabilities
Read the guide: https://anchore.com/blog/anchore-azure-devops/
#CloudNative #AzureDevOps #DevOps
Integrating Anchore Security Scanning into Your Azure DevOps Pipeline | Anchore

With a few lines of yaml, add security to your Azure DevOps pipeline to keep non-compliant containers from reaching production environments.

Anchore