liveBook · Manning

GitHub Actions

As explained in Azure Security

GitHub Actions is GitHub's automation platform for implementing software development workflows, including continuous integration and deployment.

GitHub Actions automates CI/CD workflows around GitHub repositories. It can deploy application changes to Azure and apply security configuration consistently through infrastructure as code. section 11.3.1

A security-focused Azure workflow typically proceeds as follows:

  • Create a Microsoft Entra service principal with the permissions and subscription scope required by Azure CLI. section 11.3.1
  • Store the authentication output as a protected GitHub repository secret. section 11.3.1
  • Create a workflow that uses Azure CLI to enable Microsoft Defender for Cloud plans across the relevant subscriptions. section 11.3.1

GitHub Actions can run Microsoft Security DevOps against application code and infrastructure-as-code templates. Onboarded repositories also expose scan results in the Defender for Cloud dashboard, aligning developer and security-team visibility. section 11.4.4

How Azure Security covers it

How deep it goes
Walks through service-principal creation, secret storage, workflow creation, scanning, and log review without detailing GitHub Actions internals.
Examples
Uses service-principal commands, repository secrets, Defender CSPM workflows, SARIF uploads, and execution logs.
What it assumes
Assumes a GitHub repository and Azure environment, while allowing readers unfamiliar with GitHub or another CI/CD platform to follow the concepts.
What you can do after
Operate GitHub Actions to deploy Azure changes, enable Defender plans, and surface code or IaC findings for remediation.
How it connects
Connects infrastructure as code, CI/CD, Azure CLI, Microsoft Entra ID, Microsoft Defender for Cloud, and Microsoft Security DevOps.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Also explained in

Compare how 10 books explain GitHub Actions →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.