Hands-on exercise – Performing pre-receive checks and dependency reviews

In this exercise, we will be performing pre-receive checks on GitHub and Azure DevOps. We will also review the dependencies of the eShopOnWeb application for any security vulnerabilities.

We’ll undertake the following tasks:

• Task 1: Enabling push protection on Azure DevOps
• Task 2: Enabling push protection on GitHub
• Task 3: Reviewing dependencies on GitHub

Let’s begin!

Task 1 – Enabling push protection on Azure DevOps

This task aims to configure pre-receive conditions to enforce repository or organization policies before the push is accepted into the repository. For this task, we will enable push protection to block any commits that have secrets:

1. On the Azure portal home page, in the search box, type Azure DevOps Organizations and select the Azure DevOps Organizations. Choose one of your existing organizations or Create new organization.
2. Create...