Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Defender for Cloud integrates with Microsoft Security Copilot to help you fix Infrastructure as Code (IaC) issues in your code repositories. With Copilot, you can catch and fix security issues early in the development cycle. Copilot creates pull requests (PRs) that correct the problems it finds. Automatically generated PRs help ensure that code issues are fixed quickly and correctly. Before you get started, make sure you meet the prerequisites for Defender for Cloud, Security Copilot, and repository integration.
Prerequisites
Before you begin, make sure you have the following items set up:
- Enable Defender for Cloud on your environment.
- Connect your Azure DevOps environment to Defender for Cloud.
- Configure the Microsoft Security DevOps Azure DevOps extension.
- Review and ensure you meet the DevOps security support and prerequisites requirements.
- Have access to Azure Copilot.
- Have Security Compute Units assigned for Microsoft Security Copilot.
Remediate an Infrastructure as Code scanning finding
You can use Copilot in Defender for Cloud to fix flagged issues. Follow these steps to resolve a finding:
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
Go to Recommendations.
Search for and select the Azure DevOps repositories should have infrastructure as code scanning findings resolved recommendation.
Select Reduce risk with Copilot.
Select Help me remediate this recommendation.
Select security check.
Select the description that matches the security check finding.
Select Select.
Review the summary of the code fix.
Select Submit.
Select the pull request link shown in the Copilot results.
Review the pull request.
After Copilot creates the pull request in your code repository, a developer should review and approve it before merging.