Microsoft Security Product Hub

GitHub Actions integration with Azure Security Center

Overview

GitHub Actions enables build, test and deploy from GitHub, allowing automation of continuous integration and continuous delivery (CI/CD). Microsoft Defender for Cloud integration with GitHub Actions provides security teams with additional insight and the ability to run vulnerability scans, resolve issues and visualise the security posture of workflows in the CI/CD pipeline. CI/CD vulnerability scanning also gives visibility into container images and perform scans before deploying to a container registry or Kubernetes cluster.

Outcomes

  • Security built in to software development with security scans as part of the continuous integration workflow
  • Scan for vulnerabilities before deploying
  • Visibility in Microsoft Defender for Cloud of the security posture of CI/CD workflows
All
Secure Remote Work
Zero Trust