LogoLogo
Book a demo
  • Welcome to OXdocs
  • Get started
    • Connect to OX
      • Create an organization
      • Accept an invitation
    • Supported languages
    • Supported connectors
  • A tour of OX
    • Common page elements
    • Dashboard
    • Applications
    • Issues
    • Connectors
    • Policies
    • Exclusions
    • SaaS BOM
    • API BOM
    • Cloud BOM
    • Users
    • Settings
  • Scanning Selected Repositories
  • Securing Docker Images
  • OX Extension for VS Code
  • Artifact Integrity
  • Securing Multiple Branches
  • Enforcing SLA
  • Making connections
    • Asana Ticketing
    • GitHub
    • Getting GitHub Tokens
    • Tenable
    • GitGuardian
    • GitLab
    • Bitbucket
    • Azure
      • Azure Boards
      • Connecting to Azure
      • Azure Cloud
    • AWS
      • AWS OX Integration Policy
    • Jenkins
    • Google
    • JFrog Artifactory
    • EKS
    • Jira
      • Jira Permissions
      • Automating Jira Ticketing
    • Slack
    • Microsoft Teams
    • Red Hat Quay
    • Monday
    • Nexus IQ CLI
    • ServiceNow
    • OX Broker
    • GitHub Issues
    • GKE
  • Privacy policy
  • Reporting
    • Executive Reports
    • SBOM Reports
    • SLA Reports
  • Contact us
  • API Documentation
    • Working with OX APIs
    • API Reference
      • OX API Authentication
      • API Security
        • Queries
          • getApiSecurityFiltersLazy
          • getApiSecurityItems
        • Types
          • Objects
            • apiDefinitions
            • apiInventoryCommitInfo
            • apiInventoryCommit
            • apiSecurityItemFunction
            • apiSecurityItem
            • apiSecurityItemsResponse
            • methodParameter
            • methodResponse
          • Inputs
            • apiSecFilters
            • apiSecurityOrderBy
            • getApiSecurityInput
      • Application
        • Queries
          • getApplications
          • getSingleApplicationInfo
        • Mutations
          • setPriority
        • Types
          • Objects
            • appCategories
            • appFlowItemLocation
            • appSeverities
            • appTag
            • appToolCoverage
            • applicationExtraInfo
            • applicationFlow
            • applicationSeverityChangedReason
            • application
            • applicationsResponse
            • artifactItem
            • cicdInfoLocation
            • cicdInfo
            • cloudDeployment
            • dockerfile
            • extraInfoSnippet
            • kubernetesItem
            • language
            • matchedProject
            • matchedProjects
            • orchestratorItem
            • ownerInfo
            • pipeline
            • repositoryItem
            • scoreHistoryItem
            • serverSecurityInfraItem
            • setPriorityResponse
            • severities
            • toolCoverageSources
          • Inputs
            • appFilters
            • autoCompleteSearch
            • conditionalFilters
            • dateRange
            • getApplicationsInput
            • orderAppsBy
            • priorityInput
            • range
            • singleApplicationInput
            • systemFilter
          • Enums
            • appOwnerRole
            • appSystemsTypes
            • applicationsFilter
            • conditionType
            • filterTypes
            • irrelevancyFilter
            • orderByField
            • oxTagType
            • pipelineScanResult
      • Applications Owners
        • Queries
          • getAppOwnersByAppIdsAndRole
          • getAppOwners
        • Mutations
          • setAppOwners
        • Types
          • Objects
            • appOwner
            • getAppOwnersByAppIdsAndRoleRes
          • Inputs
            • getAppOwnersByAppIdsAndRoleInput
            • getAppOwnersInput
            • ownersByRoleInput
            • setApplicationsOwnersByRoleInput
            • userInputDto
      • Artifact
        • Queries
          • getArtifact
          • getArtifactsTopFilters
          • getArtifacts
        • Types
          • Objects
            • artifactApplication
            • artifactCategories
            • artifactInfo
            • artifactPackage
            • artifactRegistryDescription
            • artifactsResponse
            • artifactsTopFiltersResponse
            • cloudArtifactData
            • cloudDescription
            • ecs
            • iArtifactInfo
          • Inputs
            • artifactFilters
            • artifactsSort
            • getArtifactInput
            • getArtifactsInput
          • Enums
            • artifactInfoTypes
            • artifactTopFilters
            • artifactsSortByFields
            • cloudSubTypes
            • cloudTypes
          • Unions
            • commonCloudAttributesUnion
      • Audit
        • Queries
          • getLogsCount
          • getLogs
        • Types
          • Objects
            • auditLogCount
            • auditLog
            • excludedIssue
            • logPolicy
            • multipliedBranchWithReason
            • owner
            • pipelineSettingsV2
          • Inputs
            • getLogsInput
            • logDateRange
            • logOrderBy
          • Enums
            • direction
            • logName
            • logType
      • Cicd Issue
        • Queries
          • getCicdIssue
          • getCicdIssues
        • Types
          • Inputs
            • cicdIssueFilters
            • cicdIssuesInput
            • cicdIssuesSort
          • Enums
            • cicdIssueSortByFields
      • Cloud Security
        • Queries
          • getCloudItems
          • getSingleCloudBomItem
        • Types
          • Objects
            • appInfo
            • cloudItemImageHash
            • cloudItemImage
            • cloudItem
            • cloudItemsResponse
            • exposurePathItem
            • issueStat
            • issuesStats
            • workload
          • Inputs
            • cloudItemsFilters
            • cloudItemsInput
            • cloudItemsOrderBy
            • getSingleCloudBomItem
      • Connectors
        • Queries
          • getConnectorResources
          • getConnectorsByFamily
        • Mutations
          • addCredentials
          • monitorConnectorResources
          • removeCredentials
          • verifySingleConnectorCredentials
        • Types
          • Objects
            • aksCredentials
            • apiSecretAndAccessKeyCredentials
            • appIdAndTokenCredentials
            • atlassianCredsOutput
            • awsAssumeRoleCredentialsOnprem
            • awsAssumeRoleCredentials
            • awsCloudFormationInfo
            • awseksCredentials
            • azureCloudCredentials
            • bitbucketAppCredentials
            • bitbucketAppInfo
            • botIdentityProvider
            • brokerCredentials
            • clientIdClientSecretCredentials
            • clientIdSecretApiUrlCredentials
            • clientIdSecretKeyCredentials
            • conditionalOptionalTabs
            • connectionInstructions
            • connectorResourceResponse
            • connectorResponse
            • connector
            • connectorsByFamily
            • extraOptionalCreds
            • gitHubAppCredentials
            • gitHubAppInfo
            • identityProviderInfo
            • identityProvider
            • k8sInspectorCredentials
            • linkToDocs
            • monitorConnectorResourceResponse
            • optionalConnectorInput
            • optionalFields
            • organizationIdAndApiKeyCredentials
            • resourceItem
            • resourceOptions
            • resource
            • servicePrincipalCredentials
            • tabInputs
            • tenantClientsubscriptionIdSecretCredentials
            • tenantIdClientIdClientSecretCredentials
            • tokenAndProjectIdCredentials
            • tokenAndUserCredentials
            • tokenCredentials
            • tokenOnlyCredentials
            • userPasswordAndTenantCredentials
            • userPasswordCredentials
            • userPasswordOnlyCredentials
            • verifySingleCredentialsResponse
            • webhookCredentials
          • Inputs
            • addCredentialsInput
            • atlassianCreds
            • credentialsInput
            • extraOptionalCredsInput
            • getConnectorResourcesInput
            • gitHubAppInstallationTokenInput
            • idpTokenInput
            • monitorConnectorResourceInput
            • optionalFieldsInput
            • removeCredentialsInput
            • resourceInput
            • verifyCredentialsInput
          • Enums
            • credentialsType
            • inputTypes
            • resourceIcon
            • resourceName
            • resourceType
          • Unions
            • credential
      • Exclusions
        • Queries
          • getExclusions
        • Types
          • Objects
            • exclusionMatch
            • exclusion
            • getExclusionsRes
          • Inputs
            • exclusionsFilters
            • expiredAtFilter
            • getExclusionsInput
          • Enums
            • exclusionMode
            • exclusionScope
            • exclusionType
            • statusMode
      • Issue
        • Queries
          • getDisappearedIssue
          • getDisappearedIssues
          • getIssueGraph
          • getIssuePrioritization
          • getIssuesConditionalFiltersLazy
          • getIssuesTrendData
          • getIssues
          • getRemovedIssue
          • getRemovedIssues
          • getResolvedIssue
          • getResolvedIssues
          • getSbomIssuesBreakdown
          • getSingleIssueInfo
        • Mutations
          • addCommentToIssue
          • updateIssueSeverity
        • Types
          • Objects
            • additionalTab
            • aggItem
            • aggregationColumn
            • artifactInSbomLibs
            • cicdFields
            • codeLocation
            • complianceItem
            • cweList
            • dependencyEdge
            • dependencyNode
            • disappearedIssuesResponse
            • edge
            • exposedByApiItem
            • extraInfoContainer
            • extraInfo
            • filterExtraInfo
            • filterInfo
            • filterLazyResponse
            • filterLazy
            • fixAppliedDeatils
            • fixInputOption
            • fixInput
            • fixIssue
            • gptInfo
            • iAggColumns
            • iAggSummary
            • iAggregations
            • iAppsInfo
            • iCategory
            • iPolicy
            • issueDetailsTabs
            • issueGraph
            • issueMessage
            • issueResource
            • issueScore
            • issue
            • issuesBreakdown
            • issuesBySeverity
            • issuesPrioritizationResponse
            • issuesResponse
            • issuesTrendResponse
            • languageInfo
            • latestCommit
            • maintainer
            • node
            • oscarItem
            • policyFix
            • prevSeverity
            • prioritizationInfo
            • pullRequest
            • reasonDetails
            • recipient
            • sbomCommit
            • sbomDependencyGraphResponse
            • sbomLib
            • sbomReference
            • scaVulnerability
            • severityChangedExtraInfo
            • severityChangedReason
            • severityFactorsDiff
            • slaData
            • slackNotification
            • snippetInfo
            • ticket
            • triggerPackage
          • Inputs
            • addCommentToIssueInput
            • dIssuesSort
            • dateRangeFilter
            • disappearedIssuesInput
            • fetchDashboardInput
            • issueFilters
            • issuesExportOptions
            • issuesInput
            • issuesSort
            • orderBy
            • rIssuesSort
            • reportSlaExportColumn
            • resolvedIssuesInput
            • singleDisappearedIssueInput
            • singleIssueInput
            • updateIssueSeverityInput
          • Enums
            • cicdIssueStatus
            • countRule
            • criticalityFilter
            • edgeType
            • inventoryTypes
            • issueSortByFields
            • issueStatus
            • issuesExportOptionsType
            • messagingVendorsTypes
            • nodeType
            • provider
            • reportSlaExportColumnKeys
            • scaFixType
            • severityFactorStatus
            • slaStatus
      • Organization
        • Queries
          • getGlobalRoles
          • getInvitations
          • getMembers
        • Mutations
          • createInvitation
          • createMultipleInvitations
          • deleteInvitation
          • resendInvitation
        • Types
          • Objects
            • invitation
            • member
            • role
          • Inputs
            • invitationInput
      • Pipeline
        • Queries
          • getBlockedVsMonitorTrend
          • getDurationTrend
          • getPipelineSummary
          • getSeverityTrendsInPipeline
        • Types
          • Objects
            • blockedVsMonitorTrendRes
            • durationTrendRes
            • pipelineSummaryResponse
            • pipelineSummary
            • severityTrendsInPipelineRes
            • singleApp
            • tagOutput
          • Inputs
            • getPipelineSummaryInput
            • pipelineSummaryFilters
          • Enums
            • pipelineScanCompletionStatus
      • Saas SBOM
        • Queries
          • getSaasBomItems
        • Types
          • Objects
            • saasBomItem
            • saasBomItemsResponse
          • Inputs
            • getSaasBomItemsInput
            • saasBomFilters
            • saasBomOrderBy
      • SBOM
        • Queries
          • getSbomLibraries
          • getSbomVulnerableLibraries
          • getSingleSbomLibrary
        • Types
          • Objects
            • sbomLibResponse
            • sbomVulnerableLibrariesResponseItem
            • sbomVulnerableLibrariesResponse
          • Inputs
            • getApplicationsSbom
            • getSingleSbomLibraryInput
            • sbomLibFilters
            • sbomLibSortInput
            • sbomVulnerableLibrariesInput
          • Enums
            • sbomLibSortFields
            • severityRisk
      • Scan
        • Queries
          • checkScanInProgress
        • Mutations
          • scanAll
          • singleRepoScan
        • Types
          • Objects
            • scanInProgressResponse
            • scanResponse
          • Inputs
            • applicationToScanInput
            • singleRepoScanInput
          • Enums
            • scanStage
      • Tags
        • Queries
          • getAllTags
          • getAppTags
        • Mutations
          • addTags
          • modifyAppsTags
          • removeTags
        • Types
          • Objects
            • acknowledge
            • addTagRes
            • appTagObject
            • getAllTagsResponse
            • getAppsTagsRes
            • tagObject
          • Inputs
            • addTagInput
            • deleteTagsFilter
            • deleteTagsInput
            • getAppsTagsInputFilter
            • getAppsTagsInput
            • getTagsFilters
            • getTagsInput
            • modifyAppsTagsInput
            • tagDto
Powered by GitBook

Copyright ©2024 OX Security. All rights reserved.

On this page
  • Prerequisites
  • Getting Azure Boards Token
  • Connecting to Microsoft Azure
  • Adding Azure Boards Tickets
  1. Making connections
  2. Azure

Azure Boards

Last updated 3 months ago

Azure Boards is a work tracking tool within Azure DevOps that helps software development teams plan, track, and discuss work items efficiently.

It provides customizable Kanban boards, backlogs, dashboards, and reporting tools to streamline project management, ensuring teams can collaborate effectively on software development and delivery.

Integrating OX Security with Azure Boards enhances your software development lifecycle by embedding security insights directly into your workflow, as follows:

  • Automated Issue Tracking: Security findings detected by OX Security can be logged as work items in Azure Boards, ensuring that vulnerabilities are addressed promptly.

  • Seamless Collaboration: Developers, security teams, and project managers can manage security-related tasks within their existing work tracking system, reducing friction in the remediation process.

  • Improved Security Visibility: The integration provides clear visibility into security risks within the development pipeline, helping teams prioritize and resolve issues efficiently.

  • Enhanced Compliance Management: Organizations can ensure compliance by tracking security-related tasks alongside other development activities, making audits and reporting more manageable.

Prerequisites

  • Microsoft Azure account

Getting Azure Boards Token

  1. Log in to your Azure DevOps account: https://${hosturl}/${OrgName}

  2. From your profile picture in the top-right corner select User settings.

  1. Select Personal Access Tokens and then click + New Token.

  2. In the Create a new personal access token dialog box, set the following:

Parameter
Description

Name

A significant name that makes it easy to identify the purpose of the token.

Organization

Your organization name. In case your azure account is used for several organizations, you need to choose from a list.

Expiration (UTC)

Set the expiration date as far as possible. Set a specific number of days for the token's validity. Define a number of days based on your organization needs. Note: For security reasons, it is not recommended to use the option Never expire.

Scopes

The scope of access associated with this token. Set the following: - Work items: Read & write. - Member Entitlement Management: Read - Project and Team: Read

  1. Select Create. The dialog with the token appears.

  1. Copy the token and store it in a different location. After closing this dialog you cannot see it again.

Connecting to Microsoft Azure

  1. In the OX app, go to Connectors and search for Azure Boards.

  1. Select Azure Boards and set the following parameters in the Configure your Azure Boards credentials dialog.

Parameter
Description

Azure Boards Host URL

Add your Azure DevOps account URL.

Token

Paste the token you have created.

Token Name

The name is generated automatically by OX.

  1. Select CONNECT. The success message appears.

Adding Azure Boards Tickets

After establishing the connection with Azure Boards, you can add Azure tickets for DevOps tasks and issues in OX using one of the following methods:

  • Adding a new ticket to an issue, or bulk of issues.

  • Adding a new ticket as a scheduled task using workflows.

To add a new Azure ticket in OX:

  1. In the Issues page, identify and select the issue for which you want to add a devops related ticket in Azure Boards.

  2. Select the Azure Boards icon.

  1. Set the ticket details in the Create Azure Boards Ticket dialog and select CREATE TICKET.

Parameter
Description

Title

The title of the ticket that describes the problem/issue.

Project

The name of the project, as it's defined in Azure Boards.

Priority

Set the priority that you think should be assigned to this issue.

Assign To

Set the team member who will work on the ticket.

Tags

Add tags for ticket classification.

Story Points

Define how long it should take to resolve this ticket.

Type

Specify the type of the Azure ticket (Epic, Issue, Task).

Teams

The team that should resolve the ticket.

Area

The area, as defined in the Azure Boards ticket.

Iteration

The sprint in which this ticket must be resolved.

The new ticket appears in Azure Boards.