Zero Touch Provisioning for Azure DevOps¶
Zero Touch Provisioning (ZTP) for Azure DevOps (ADO) enables the security check workflows to be executed from the boost
repository in the ADO organization. This guide walks you through the process of setting up ZTP for Azure DevOps and every other thing you need to know.
Prerequisites¶
Before you begin, ensure you have:
- Integrated Azure DevOps to BoostSecurity.
- Installed the BoostSecurity Scanner marketplace application.
- Created a non-empty
boost
repo in the organization where you installed the BoostSecurity marketplace application.
Integration Steps¶
-
Go to the Integrations page, select your Azure DevOps integration and click on the configuration tab.
-
On the ZTP column, you will notice that the ZTP status is set to Not Set. Click on the actions menu next to the status and select Enable.
-
On the ZTP Wizard, the first step is to give BoostSecurity permissions for the Zero Touch Flow on your Azure DevOps Organization.
The Zero Touch Flow would require a Personal Access Token with the following permissions:
-
Click the Next button to proceed.
-
BoostSecurity configures the
boost
repo on your ADO organization. -
Install and authorize the BoostSecurity.io Zero Touch provisioning on your organizations. Click on the Accept button at the bottom of the page.
-
The pipeline configuration is ready.
Zero Touch Provisioning is now enabled!!!