I want to use Microsoft Security Code Analysis in Azure DevOps is there any cost involved with it for using it in scanning the code - azure-devops

I want to use Microsoft Security Code Analysis in Azure DevOps is there any cost involved with it.

Please refer to this doc: Onboarding and installing
If you have one of the following support offerings, contact your Technical Account Manager to purchase or swap existing hours to get access to the extension.
If you do not have one of the mentioned above support agreements, you can purchase the extension from one of our Partners.
Based on the doc, you need to purchase for this tool. So it is not free.
You need to contact the corresponding email to obtain the specific payment method

Related

Obtain User Access Metrics in Azure DevOps

Good morning;
I'd like to know if it's possible to make a query in Azure DevOps for obtaining the team's users accesses stats.
I can obtain the cards modified by the users, but i want to know if there's a way to know if the users are accessing to the boards (using Azure devops queries).
Thanks!!
Do you mean to get users list who are accessing boards?
If so, I am afraid that there is no way to get this information right now.
This feature is not supported by azure devops for the time being.
You could add your request for this feature on our UserVoice site , which is our main forum for product suggestions. After suggest raised, you can vote and add your comments for this feedback. The product team would provide the updates if they view it.
Thank you for your response.
As you said, I need the list of the users who are accessing boards.
By the moment, I'll obtain the number of cards modified by each user, and this could give me an idea about the users activity.

Azure DevOps and Teams - one Group group to control membership to both

I have been trawling the internet and clicking myself blue in the face! Hopefully someone has a definitive answer.
I want to have one Group (in either of Azure AD, Microsoft Teams or Azure DevOps). This group must have access to a DevOps project and a Team site. When I change the membership of the group, the membership must change for both the Team and the DevOps project. I want to avoid the overhead of managing the groups for both separately.
Is this at all possible? Thanks.
This is a really good question, and the answer is not obvious at all. Ironically we had the same exact problem in Microsoft Teams - when a user was added or deleted from the underlying Office 365 Group (which is mastered in Azure AD), it would take up to an hour, sometimes more, to be reflected in Teams, which has its own copy of the member list.
There is a way to do it, and it's how Teams does it: it relies on a relatively new feature in Microsoft Graph called subscriptions. You can find the documentation for it here: https://learn.microsoft.com/en-us/graph/api/resources/subscription?view=graph-rest-1.0.
Essentially what you want to do is create a subscription to the group: POST https://graph.microsoft.com/v1.0/subscriptions with the right message body and your endpoint will be called whenever there's a membership change in the group. Your endpoint won't know what changed, just the event and some IDs - you will likely have to make a separate call to retrieve the actual data (unless the IDs alone are sufficient).
There's a sample on GitHub that illustrates how to use Microsoft Graph subscriptions including more details on how to subscribe to group notifications specifically.
One thing to be aware of is that to use these APIs, your application will require fairly elevated permissions: Group.Read.All which means it has the ability to read not only the team/group members, but all of its messages too (among other things), for every group in your Office 365 tenant. We are working with the MS Graph team to support a less-privileged, per-group permission approach, but even after that's released for Teams Graph APIs, support for that will have to be added to the subscriptions APIs I just mentioned and that may not happen for a while.

AD VSTS: Having business users submit feature requests/bugs

We use Visual Studio Team Services backed by Azure AD and want any user in our AD to be able to submit a feature or bug. I know some products like Jira allow this either through their issue collector or via email. It seems with VSTS the user has to be a stakeholder in the project or else they would receive a 401 (I tested with one user in our AD). Has anyone found a good solution or extension that allows AD users (or users external to the project) to submit features requests/bugs to a VSTS project? Or do we have to create something utilizing VSTS's REST API?
The user must be added to your VSTS, then he can submit a feature or bug work item. Regarding personal access token (can call Work item REST API), it is created by the user in your VSTS too, it is not recommended, because of the security issue and you don’t know who submit the feature or bug, it’s hard to manage.

Create client under CSP using powershell

We are switching from reseller/advisor accounts to CSP.
We can manually create Customers under PartnerCenter which creates the relationship as Cloud Reseller as opposed to Advisor as before.
We can create the company name fine and add License based subscriptions however when we add Usage Based Subscription it lists the subscription name as Microsoft Azure instead of our Company Name. Also we have to go into this subscription and manually create AzureReader and AzureAdmin users under the ARM Portal.
I am looking for powershell options to automate this process:
Create a new client under CSP using powershell.
Create a usage based subscription with our Company Name instead of Subscription name of Microsoft Azure under this new client.
Add the AzureReader and AzureAdmin users to the Subscription.
Any assistance is appreciated.
I looked through several forums as well as scripts on Github but have not found anything and unfortunately I am not a coder or powershell guru.
Updating my answer -
Powershell preview is out now here
i am afraid there are no power-shell to accomplish this but instead there is a .net sdk or a REST API that can help to accomplish this.
Read more here

SendGrid free plan is not listed Select Plan dropdown

we are developing services on IBM Bluemix and are working in multiple Bluemix orgs. We’ve noticed recently that the SendGrid free plan no longer is available (isn’t listed in the Select Plan dropdown). We see only Bronze, Silver, Gold, Platinum. Is this a bug? Was the free plan intentionally removed? #BenRondeau et al.
Thanks!.. Duane
The SendGrid free plan in Bluemix is temporarily unavailable for maintenance per the Bluemix status page:
http://ibm.biz/bluemixstatus
Here is the maintenance text for your convenience:
Maintenance: SendGrid service - US South and United Kingdom regions
The SendGrid 3rd party service has been removed from the catalog
temporarily for maintenance. This page will be updated when that
maintenance is complete. Users can not create new instances of the
service during this time. Existing instances will continue to work as
expected.
Update 2016-02-19 19:03 UTC: Maintenance of the paid SendGrid plan
offerings is complete and those plans have been restored to the US
South, United Kingdom regions. The team is working to restore the
free plan as soon as possible.
I'm not sure how the integration is with Bluemix, and if there's an interface within orgs for SendGrid that you're referring to, but you can easily get it the old fashion way: from the settings page on SendGrid's site. I made a free account just yesterday and am currently using it today without being billed.
If you need help navigating their site, they have a page dedicated to their free plan.
Just click the Try for free button. It takes you to a modal page where you can add your credentials and sign up. :)