{"id":71054,"date":"2025-06-02T06:30:55","date_gmt":"2025-06-02T14:30:55","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=71054"},"modified":"2025-06-03T14:21:51","modified_gmt":"2025-06-03T22:21:51","slug":"github-secret-protection-and-github-code-security-for-azure-devops","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/github-secret-protection-and-github-code-security-for-azure-devops\/","title":{"rendered":"GitHub Secret Protection and GitHub Code Security for Azure DevOps"},"content":{"rendered":"<p>Following the changes to <a href=\"https:\/\/github.blog\/changelog\/2025-03-04-introducing-github-secret-protection-and-github-code-security\/\">GitHub Advanced Security on GitHub<\/a>, we&#8217;re launching the standalone security products of GitHub Secret Protection and GitHub Code Security for Azure DevOps today.<\/p>\n<p>You can bring the protection of Advanced Security to your enterprise with the flexibility to enable the right level of protection for your repositories.<\/p>\n<h2>GitHub Secret Protection for Azure DevOps<\/h2>\n<p>Secret Protection is available for $19 per active committer per month, which provides features including:<\/p>\n<ul>\n<li>Push protection, to prevent secret leaks before they happen <\/li>\n<li>Secret scanning alerts with notifications, to catch existing exposures before they become a problem<\/li>\n<li>Security overview, which provides insight into your organization&#8217;s level of risk and security protection <\/li>\n<\/ul>\n<h2>GitHub Code Security for Azure DevOps<\/h2>\n<p>Code Security is available for $30 per active committer per month, which provides features including:<\/p>\n<ul>\n<li>Dependency alerts, to find vulnerabilities in open-source dependencies <\/li>\n<li>CodeQL scanning, to detect vulnerabilities directly in your code <\/li>\n<li>Security findings for third-party tools <\/li>\n<li>Security overview, which provides insight into your organization&#8217;s level of risk and security protection <\/li>\n<\/ul>\n<h2>Get started today<\/h2>\n<p>This experience will roll out to customers over this week, and new customers can start using Secret Protection and Code Security plans as soon as it&#8217;s available in their organization. As a project collection administrator, navigate to <strong>Repositories<\/strong> under your organization, project, or repository settings. From there, you can enable Secret Protection and Code Security features.<\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled.png\"><img decoding=\"async\" width=\"1720\" height=\"912\" src=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled.png\" alt=\"advsec repository settings plans enabled image secret protection and code security\" class=\"alignnone size-full wp-image-71059\" srcset=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled.png 1720w, https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled-300x159.png 300w, https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled-1024x543.png 1024w, https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled-768x407.png 768w, https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/advsec-repository-settings-plans-enabled-1536x814.png 1536w\" sizes=\"(max-width: 1720px) 100vw, 1720px\" \/><\/a><\/p>\n<p>To estimate your costs, you can use the <a href=\"https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/devops\/azure-devops-services\/\">Azure pricing page<\/a>. Select <strong>Azure DevOps Services<\/strong>, then scroll down to see GitHub Advanced Security options.<\/p>\n<p>For existing customers, there is no disruption to your current Advanced Security experience. If you&#8217;re interested in moving to the Secret Protection and Code Security products, contact Azure DevOps support via the <strong>Azure Portal<\/strong>. File a support ticket for the GitHub Advanced Security for Azure DevOps service and select &#8220;Billing migration from bundled to standalone products&#8221; as the problem type.<\/p>\n<p>In your support request, include all Azure subscriptions that may be linked to your Azure DevOps organizations you&#8217;d like to migrate.<\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/file-support-ticket-1.png\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/file-support-ticket-1.png\" alt=\"file support ticket image\" width=\"555\" height=\"396\" class=\"aligncenter size-full wp-image-71169\" srcset=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/file-support-ticket-1.png 555w, https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2025\/05\/file-support-ticket-1-300x214.png 300w\" sizes=\"(max-width: 555px) 100vw, 555px\" \/><\/a><\/p>\n<p>Learn more about enabling <a href=\"https:\/\/learn.microsoft.com\/azure\/devops\/repos\/security\/configure-github-advanced-security-features\">Secret Protection and Code Security<\/a> and included features. Have any feedback? Please share that with us directly or on <a href=\"https:\/\/developercommunity.visualstudio.com\/AzureDevOps\">Developer Community<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Following the changes to GitHub Advanced Security on GitHub, we&#8217;re launching the standalone security products of GitHub Secret Protection and GitHub Code Security for Azure DevOps today. You can bring the protection of Advanced Security to your enterprise with the flexibility to enable the right level of protection for your repositories. GitHub Secret Protection for [&hellip;]<\/p>\n","protected":false},"author":177424,"featured_media":71180,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1,251],"tags":[],"class_list":["post-71054","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops","category-security"],"acf":[],"blog_post_summary":"<p>Following the changes to GitHub Advanced Security on GitHub, we&#8217;re launching the standalone security products of GitHub Secret Protection and GitHub Code Security for Azure DevOps today. You can bring the protection of Advanced Security to your enterprise with the flexibility to enable the right level of protection for your repositories. GitHub Secret Protection for [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/71054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/177424"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=71054"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/71054\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/71180"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=71054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=71054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=71054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}