Azure DevOps

Akto's integration with Azure DevOps allows you to maintain agentic AI security through Azure Pipelines. With this integration, you'll be able to:

• Check status of Akto CICD scans directly from Azure DevOps through quality gates

• Generate scans from live functional traffic for targeted security scanning

• Insert security seamlessly into existing functional scans with complete automation

Prerequisites

• Azure DevOps project with administrator access

• Akto dashboard access

• Akto API credentials (API key and dashboard URL)

• Valid test ID from Akto Probe

Steps to Configure Azure DevOps Pipeline

1. Create Pipeline Configuration

Create a new file named azure-pipelines.yml in your repository root:

trigger:
- main  # Adjust this based on the branch to trigger the pipeline

pool:
  vmImage: 'ubuntu-latest'  # Defines the agent where the pipeline will run

variables:
  AKTO_DASHBOARD_URL: "https://app.akto.io"
  AKTO_API_KEY: "<token>"
  AKTO_TEST_ID: "<test-id>"
  WAIT_TIME_FOR_RESULT: "1000"

stages:
- stage: Build
  displayName: 'Build Stage'
  jobs:
  - job: BuildJob
    displayName: 'Building the Project'
    steps:
    - script: |
        echo "Compiling the code..."
        echo "Compile complete."
      displayName: 'Compile'

- stage: Test
  displayName: 'Test Stage'
  jobs:
  - job: TestScan
    displayName: 'Run Akto Security Scan'
    container:  # Use container for this job
      image: aktosecurity/akto-testing-scan:latest
    steps:
    - script: |
        cd /usr/src/app
        echo $(AKTO_DASHBOARD_URL)
        echo $(AKTO_API_KEY)
        echo $(AKTO_TEST_ID)
        node index.js
      displayName: 'Running Akto Security Scan'

2. Configure Pipeline Variables

1. Go to Pipelines > Edit > Variables

1. Add the following required variables:

• AKTO_DASHBOARD_URL: Your Akto dashboard URL

• AKTO_API_KEY: Your Akto API key (mark as secret)

• AKTO_TEST_ID: Your Akto test ID

• WAIT_TIME_FOR_RESULT: Time to wait for scan results

Save it and then hit the run button

3. Set Up Branch Policies [OPTIONAL - to configure pipeline for all builds]

1. Navigate to Project Settings > Repositories

2. Select your repository branch

3. Add build policy:

   • Add build pipeline

   • Make it required

4. Verify Integration [OPTIONAL]

1. Create a new pull request

2. Verify that Akto security checks appear in the pipeline

3. Check scan results in the Azure DevOps pipeline interface

Viewing Results

1. Navigate to your pipeline run

2. Check the 'Test Stage' logs

3. Review security scan results

4. Access detailed reports in Akto dashboard