DocumentationAPI ReferenceRelease Notes
Documentation

Azure DevOps Integration

Suggest Edits

Connect your Azure DevOps repositories to Panoptica to discover security vulnerabilities and infrastructure misconfigurations earlier in the development pipeline. Adding the Panoptica app as a service principal to your Azure DevOps organization enables advanced security scanning of your repositories.

📘

Prerequisite

You must be an Administrator of the Azure organization you wish to integrate in order to add the Panoptica app service principal.

Add service principal

To integrate the Panoptica application with your Azure DevOps organization, you'll need to add the Panoptica app service principal as a member. Follow these steps:

  1. To get started, navigate to Code Security in the Panoptica console UI navigation pane, and click +Add Repository to open a drop-down box listing the SCM providers Panoptica supports.

  1. Select Azure to open a new tab to your Azure DevOps account. It's best to make sure you're logged into your Azure account beforehand.

  2. You will be asked to approve the permissions that the Panoptica app requires. Please click Accept.


  3. After clicking Accept, you will be returned to the Panoptica console UI, where you'll find instructions for completing the connection.

    For convenience, the same instructions appear here

  4. Switch back to your Azure DevOps portal, and select the Organization where you want to add the Panoptica app service principal.

  5. Select Organization settings, located in the lower part of the left navigation pane.

  6. Select Users, located in the General section.

  7. Add Service Principle, as follows:

    1. Click 'Add users' and select 'Add new user'. This will pop up the Add new users dialog box.

    2. Under Users or Service Principals panel, enter Panoptica. If you just start typing the name, it should appear in the list of choices.

    3. Under Access level, select Basic.

    4. Under Add to projects, select the project you want to integrate with Panoptica.

    5. Under Azure DevOps Groups, leave the default Project Contributors

    6. Click Add.
      Once added, the Panoptica app service principal will appear in the list of users with the assigned role. You can manage these permissions anytime from this panel.

Complete integration

Now go back to the Panoptica console UI where the Add Panoptica app service principal overlay is still displayed, and click Connect.

After successful integration, you will start seeing the Azure DevOps projects you connected in the Repositories table.

Panoptica will scan the selected repositories in the integrated Azure DevOps organization daily for code security and posture assessment. See Code Security and CI/CD Posture to learn more.

Updated 9 months ago