Closed mattemoore closed 6 months ago
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
No love for this feature request?
Hi @mattemoore , I think this would be an excellent addition to the plugin itself. Would you be able to ship the implementation of this and we can then incorporate and release the new version with this included?
Unfortunately my current employer does not have a clear OSS contribution process or allocation but I'll put this on my list of things we could do to help the community and our own deploy of Backstage that I will bring to my leadership team. Hopefully I can get some type of percentage of team time allocated to OSS contributions.
On Wed, Feb 21, 2024 at 2:49 AM Jussi Hallila @.***> wrote:
Hi @mattemoore https://github.com/mattemoore , I think this would be an excellent addition to the plugin itself. Would you be able to ship the implementation of this and we can then incorporate and release the new version with this included?
— Reply to this email directly, view it on GitHub https://github.com/RoadieHQ/roadie-backstage-plugins/issues/1208#issuecomment-1956068338, or unsubscribe https://github.com/notifications/unsubscribe-auth/AB7ENKDPOMSQGJKKF2ZRSSTYUWRKFAVCNFSM6AAAAABBADGVF6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNJWGA3DQMZTHA . You are receiving this because you were mentioned.Message ID: @.***>
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Currently the Security Insights plugin does not support GHAS for Azure Devops
Feature Suggestion
For Azure DevOps users who have GHAS enabled this would be very useful as surfacing security issues is a key selling point for us for Backstage.
Possible Implementation
Leverage the existing well known annotation from the Azure DevOps plugin:
dev.azure.com/project-repo:
to get Project/Repo coordinates. Use host, token and organization from azureDevOps entry in app-config.yaml to connect to proper devops organization where above Project/Repo is located.Context
Surface security issues on entity page.