Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Defender for Cloud's DevOps Security agentless scanning capabilities automatically generate a Software Bill of Materials (SBOM) for connected code repositories. When a scan finishes, the process publishes the repository and identified packages to the cloud security graph.
You can use Defender for Cloud's cloud security explorer to query this data. By using the cloud security explorer, you can locate specific packages (dependencies) and identify exactly which repositories use them. Use this information to identify the impact radius of a vulnerable package version across your organization.
Prerequisites
- Enable agentless scanning in your DevOps connector.
- Wait for the initial scan to complete so the Software Bill of Materials (SBOM) data is populated in the Cloud Map.
Build a package query
By using the cloud security explorer, you can build a query to find repositories that include specific packages (dependencies) and versions.
Sign in to the Azure portal.
Go to Microsoft Defender for Cloud > Cloud Security Explorer.
Select Resource Type > DevOps.
Select the specific code repository type you want to filter for. For example, GitHub repositories.
Select Done.
Select Search.
The query runs and returns all code repositories. Select a repository from the results to view more details about the installed software and its security posture.
Add a dependency filter
To add a filter that searches for repositories containing specific packages (dependencies), continue building the query as follows.
Select (+).
Select Application > Has installed software.
Select (+) next to
Has installed software.Select Name > Equals.
Enter the package name. For example,
log4j,express, ornewtonsoft.json.Select Search.
The query runs and all repositories containing the specified package are presented. Select a repository from the results to view further details about the installed software and its security posture.
Specify a version
To add a filter that searches for a specific package version, continue building the query as follows.
Select (+) next to
Has installed software.Select Version.
Enter a version number. For example,
2.14.1.Select Search to run the query.
The query runs and all repositories containing the specified package and version are presented. Select a repository from the results to view further details about the installed software and its security posture.