{"id":69807,"date":"2024-11-19T06:13:01","date_gmt":"2024-11-19T14:13:01","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=69807"},"modified":"2024-12-06T08:14:12","modified_gmt":"2024-12-06T16:14:12","slug":"getting-the-most-out-of-azure-devops-and-github","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/getting-the-most-out-of-azure-devops-and-github\/","title":{"rendered":"Getting the most out of Azure DevOps and GitHub"},"content":{"rendered":"

Microsoft has two very successful DevSecOps products in the market \u2013 <\/a>GitHub<\/a> and <\/a>Azure DevOps<\/a>. Azure DevOps has a large enterprise customer base that loves the highly customizable enterprise-focused planning and tracking capabilities in Azure Boards, the robust continuous delivery capabilities in Azure Pipelines, the manual and exploratory testing capabilities in Azure Test Plans, and the deep integrations across the suite. GitHub is the world\u2019s largest developer community, with over 100M developers. It also serves over 4M organizations, including 90% of the Fortune 100. It\u2019s beloved by developers and at the forefront of innovation with features like GitHub Copilot<\/a>, which is transforming every aspect of the software development process.<\/p>\n

Many Azure DevOps customers have been looking at the innovations coming out of GitHub and wondering how they can realize the benefits of those innovations while still using the capabilities they love in Azure DevOps. In the rest of this post, we\u2019ll answer that question by looking at work we\u2019ve been doing across Microsoft and GitHub to enable customers to acquire and use Azure DevOps and GitHub together<\/em> to get the best of both worlds.<\/p>\n

GitHub innovation available to all Azure DevOps customers<\/h2>\n

At last year\u2019s Build conference, we announced GitHub Advanced Security for Azure DevOps<\/a> (GHAzDO), which\u00a0integrates the core capabilities of GitHub Advanced Security \u2013 secret scanning, code scanning, and dependency vulnerability scanning \u2013 directly into Azure DevOps. Since then, we\u2019ve delivered a steady stream of improvements to GHAzDO, including (most recently) pull request annotations that highlight new code security and dependency vulnerabilities right in the Azure Repos pull request experience. In the coming months, our ongoing investments in GHAzDO will include secret validity (or \u201cliveness\u201d) checking, support for Dependabot auto-updates of dependency vulnerabilities, and more.<\/p>\n

\"Image
GitHub Advanced Security for Azure DevOps pull request annotations<\/figcaption><\/figure><\/p>\n

Azure DevOps customers can similarly benefit from many of the key capabilities of GitHub Copilot for Business without making any other changes to their Azure DevOps usage. GitHub Copilot features like code completions, chat, extensions, and more are available directly in Visual Studio or Visual Studio Code. And Enterprise accounts<\/a> can be used to manage GitHub Copilot licenses without any other GitHub Enterprise usage.<\/p>\n

\"Image
Copilot Edits in Visual Studio Code<\/figcaption><\/figure><\/p>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

GitHub innovation available to Azure DevOps customers using GitHub repositories<\/h2>\n

Of course, additional innovative capabilities in both GitHub Copilot and GitHub Advanced Security are available to customers who have their code in GitHub repositories. To better enable this for Azure DevOps customers without compromising their overall experience, we\u2019ve been working hard across Microsoft and GitHub to improve the integrations between our two DevSecOps products. Our overarching goal is for the two products to feel like an integrated suite, with the same end-to-end traceability Azure DevOps customers have come to expect.<\/p>\n

In GitHub Copilot, many additional capabilities light up for customers whose code repositories are stored in GitHub, including codebase aware chat capabilities, pull request experiences like Copilot Workspace, and fine-tuned models.<\/p>\n

Similarly, GitHub Advanced Security<\/a> (GHAS) has many capabilities that GitHub Advanced Security for Azure DevOps<\/a> (GHAzDO) lacks. And while we will continue to invest in closing gaps between GHAzDO and GHAS, GHAS will always run ahead of GHAzDO. Today, this includes Copilot autofix capabilities and the new security campaigns features.<\/p>\n

\"Image
Copilot autofix capabilities<\/figcaption><\/figure><\/p>\n

To take advantage of these capabilities in GitHub, Azure DevOps customers will need to migrate some or all their repositories to GitHub. To do this, we recommend:<\/p>\n