Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

DevOps Shield

appsec Security Rules

Security and compliance rules in the appsec category. DevOps Shield helps you detect and remediate these findings across Azure DevOps, GitHub, and GitLab.

Reset

Showing 16 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS3510	ADO DevSecOps Control - Ensure Secret Scanning (SS)	AzureDevOps	appsec	Severitycritical
DOS3520	ADO DevSecOps Control - Ensure Software Composition Analysis (SCA) / Dependency Scanning	AzureDevOps	appsec	Severitycritical
DOS3530	ADO DevSecOps Control - Ensure Static Application Security Testing (SAST) / Code Scanning	AzureDevOps	appsec	Severitycritical
DOS3540	ADO DevSecOps Control - Ensure Container Image Scanning (CIS) / Container Scanning	AzureDevOps	appsec	Severitycritical
DOS3550	ADO DevSecOps Control - Ensure Infrastructure as Code Scanning (IACS)	AzureDevOps	appsec	Severitycritical
DOS3560	ADO DevSecOps Control - Ensure Infrastructure Scanning (IS)	AzureDevOps	appsec	Severitycritical
DOS3570	ADO DevSecOps Control - Ensure Dynamic Application Security Testing (DAST)	AzureDevOps	appsec	Severitycritical
DOS3580	ADO DevSecOps Control - Ensure Interactive Application Security Testing (IAST)	AzureDevOps	appsec	Severityhigh
DOS6710	GH DevSecOps Control - Ensure Secret Scanning (SS)	GitHub	appsec	Severitycritical
DOS6720	GH DevSecOps Control - Ensure Software Composition Analysis (SCA) / Dependency Scanning	GitHub	appsec	Severitycritical
DOS6730	GH DevSecOps Control - Ensure Static Application Security Testing (SAST) / Code Scanning	GitHub	appsec	Severitycritical
DOS6740	GH DevSecOps Control - Ensure Container Image Scanning (CIS) / Container Scanning	GitHub	appsec	Severitycritical
DOS6750	GH DevSecOps Control - Ensure Infrastructure as Code Scanning (IACS)	GitHub	appsec	Severitycritical
DOS6760	GH DevSecOps Control - Ensure Infrastructure Scanning (IS)	GitHub	appsec	Severitycritical
DOS6770	GH DevSecOps Control - Ensure Dynamic Application Security Testing (DAST)	GitHub	appsec	Severitycritical
DOS6780	GH DevSecOps Control - Ensure Interactive Application Security Testing (IAST)	GitHub	appsec	Severityhigh