How do to implement quality gates for GitHub Advanced Security at the PR level? · github/codeql · Discussion #15909

andreissf
Mar 13, 2024

hi there,

anybody have any luck with implementing PR blockers if a high / critical vulnerability is found by GH Advanced Security in Azure DevOps?

Thanks.

Hi @andreissf, check out some of the open-source work that is happening over in this repo: https://github.com/microsoft/GHAzDO-Resources

pr-gating - has both a sample script and pipeline to show how to block/annotate on the PR in ADO.

1 reply

@felickz. I will take a look on that! Thanks a lot