NEW

Start with the pressure: sales, launch, abuse, agents, data, or guardrails

All integrations

Integrations · DevOps

azure_devops

Azure DevOps

Gate AI language risks in Azure DevOps work items and PRs.

On-demand onlyPlanned integrationdefend

Screenshots coming soon

Visual walkthrough of Azure DevOps in progress

Overview

The SecEng Trust Scanner for Azure DevOps brings trust-language analysis to your engineering workflows — scanning work item descriptions, wiki pages, pull request bodies, and pipeline evidence from within the Azure DevOps interface. Extension panels surface findings at the point of authorship, and pipeline tasks enable automated scanning as a quality gate in your CI/CD process. Connect results directly to your SecEng program dashboard for cross-platform governance visibility.

Features

  1. 01.

    Work item scanning

    Analyze the description and acceptance criteria of any work item for AI trust-language risks before grooming or sprint commitment.

  2. 02.

    Pull request analysis

    Scan PR descriptions and embedded documentation to catch security claim issues before code merges.

  3. 03.

    Pipeline task integration

    Add the Trust Scanner as a pipeline task to enforce AI language standards as an automated quality gate in your CI/CD runs.

  4. 04.

    Evidence attachment

    Attach scan results to work items or pipeline runs for a persistent audit trail within Azure DevOps.

  5. 05.

    Program dashboard link

    Surface findings directly in your SecEng program dashboard for organization-wide AI risk tracking.

Install steps

  1. Step 01

    Install the extension from the Visual Studio Marketplace into your Azure DevOps organization.

  2. Step 02

    Configure the publisher ID and extension ID in the extension settings.

  3. Step 03

    Open any work item or pipeline run and use the Trust Scanner panel to analyze content.

  4. Step 04

    Export JSON evidence or link findings to your SecEng program dashboard.

Capabilities

scan textscan selectioncreate issueattach evidenceexport jsonopen program dashboard

Surfaces

panelpipeline task

Scan modes

selectiondocumentfile

Privacy architecture

On-demand only

Content is sent only when a user explicitly triggers the supported action. The exact payload and retention depend on the feature.

Platform vendor

Microsoft Corporation

A Microsoft Corporation integration is planned. No build or contract-mapping work has started yet.

Early access

Get the integration on the roadmap

Tell us which platform matters most and we'll prioritize it where it fits the current product surface.