Blog Post

Azure Infrastructure Blog
2 MIN READ

Scaling GitHub Advanced Security in Azure DevOps with a single reusable YAML template

Paulams732's avatar
Paulams732
Icon for Microsoft rankMicrosoft
May 11, 2026

A detection-driven Azure DevOps pipeline to run CodeQL and IaC security scans across polyglot repositories using one reusable template.

Scaling GitHub Advanced Security in Azure DevOps with a single reusable YAML template Managing security scanning across dozens of repositories can quickly become complex—especially when each reposi...
Published May 11, 2026
Version 1.0
steveburkettnz's avatar
steveburkettnz
Brass Contributor
May 11, 2026

Terrascan was deprecated and the Git repo archived about 6 months ago, so probably best to leave that out of the Integrated IaC security scanning pipeline task.