Repository onboarding

As explained in Azure Security

Repository onboarding is the process of connecting source code repositories to a security service for assessment and monitoring.

Repository onboarding connects Azure DevOps or GitHub repositories to Defender for Cloud so security posture management can identify configuration weaknesses, such as missing least-privilege controls or multifactor authentication. section 11.4.1

Onboard GitHub repositories through the Azure portal:

• Sign in to Azure, open Microsoft Defender for Cloud, select Environment Settings, choose +Add Environment, and select GitHub. section 11.4.1
• Name the security connector, select its Azure subscription and resource group, choose an Azure region, and continue with Next. section 11.4.1
• Use an identity with Contributor access to the Azure subscription and Security Admin access in Defender for Cloud. section 11.4.1

Figure 11.8 Onboarding your GitHub repositories to Defender for DevOps using the Defender for Cloud dashboard.

Use the dashboard figure to orient the GitHub repository onboarding flow and security connector setup. section 11.4.1

How Azure Security covers it

How deep it goes

Provides sequential GitHub portal steps and names required roles, connector settings, and supported regions.

Examples

Uses GitHub and Azure DevOps onboarding, including a ContosoGitHub connector and dashboard figures for both platforms.

What it assumes

Assumes Azure portal access plus Contributor on the Azure subscription and Security Admin in Defender for Cloud.

What you can do after

Operate/configure repository connections through the Azure portal using the required subscription, resource group, region, and security roles.

How it connects

Links repository onboarding with Defender for Cloud, Defender for DevOps, security connectors, posture management, and least privilege.

liveBookmanning.com

Read Azure Security on liveBook Get the book at manning.com

Related concepts

• enrollmentconfigures · Enrollment is the process of registering an entity and establishing the identity information, credentials, and initial configuration needed for system access.
• onboardingkind of · Onboarding is the process of helping a newcomer become familiar with and able to participate in a product, team, organization, or system.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.