Extensions
Cycode
cycode
Run Cycode security scans (Secrets, SAST, SCA, IaC) in Azure Pipelines and view an aggregated HTML report in a build results tab.
Scrutora Scan
Scrutora
Offline DPDPA / HIPAA / GDPR / PCI-DSS / RBI compliance scanning for Azure Pipelines. No API key; your code never leaves the agent. SARIF output.
Qualys TotalAppSec Scanning Connector
Qualys-Inc
Detect Web and API application vulnerabilities using the Qualys TotalAppSec (TAS) Scanning service
Picket
willibrandon
Local-first secrets scanning for Azure Pipelines.
Cerbi Scanner - Logging Governance
Cerbi
Run Cerbi Scanner 1.1.0 scan workflows in Azure DevOps with local policy gates and JSON, SARIF, and markdown reports.
Purplemet Web ASM
purplemet
Run Purplemet web attack surface analysis in your Azure DevOps pipelines
Trustabl
Trustabl
Static reliability/safety scanner for AI agent repos (Claude, OpenAI, Google ADK, MCP). Gates Azure Pipelines on risk + severity.