# Azure DevOps

Akto's integration with Azure DevOps allows you to maintain API security through Azure Pipelines. With this integration, you'll be able to:

* Check status of Akto CICD tests directly from Azure DevOps through quality gates
* Generate tests from live functional traffic for targeted security testing
* Insert security seamlessly into existing functional tests with complete automation

<figure><img src="https://2916937215-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRc4KTKGprZI2sPWKoaLe%2Fuploads%2Fgit-blob-3974e3b513175c2f3779ab096f8f308b3c8a6d04%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

### Prerequisites

* Azure DevOps project with administrator access
* Akto dashboard access
* [Akto API credentials](https://docs.akto.io/integrations/ci-cd-integrations/how-to/get-api-credentials) (API key and dashboard URL)
* [Valid test ID from Akto test](https://docs.akto.io/integrations/ci-cd-integrations/how-to/test-id-from-akto-test)

### Steps to Configure Azure DevOps Pipeline

#### 1. Create Pipeline Configuration

Create a new file named `azure-pipelines.yml` in your repository root:

```yaml
trigger:
- main  # Adjust this based on the branch to trigger the pipeline

pool:
  vmImage: 'ubuntu-latest'  # Defines the agent where the pipeline will run

variables:
  AKTO_DASHBOARD_URL: "https://app.akto.io"
  AKTO_API_KEY: "<token>"
  AKTO_TEST_ID: "<test-id>"
  WAIT_TIME_FOR_RESULT: "1000"

stages:
- stage: Build
  displayName: 'Build Stage'
  jobs:
  - job: BuildJob
    displayName: 'Building the Project'
    steps:
    - script: |
        echo "Compiling the code..."
        echo "Compile complete."
      displayName: 'Compile'

- stage: Test
  displayName: 'Test Stage'
  jobs:
  - job: TestScan
    displayName: 'Run Akto Security Test'
    container:  # Use container for this job
      image: aktosecurity/akto-testing-scan:latest
    steps:
    - script: |
        cd /usr/src/app
        echo $(AKTO_DASHBOARD_URL)
        echo $(AKTO_API_KEY)
        echo $(AKTO_TEST_ID)
        node index.js
      displayName: 'Running Akto Test Scan'
```

<figure><img src="https://2916937215-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRc4KTKGprZI2sPWKoaLe%2Fuploads%2Fgit-blob-9f030f4ae370a7a2009323348f5dcb5109abbb6d%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

#### 2. Configure Pipeline Variables

1. Go to Pipelines > Edit > Variables

<figure><img src="https://2916937215-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRc4KTKGprZI2sPWKoaLe%2Fuploads%2Fgit-blob-e60fbe6c35d1df102c200006c385f1d4bb1b6382%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

2. Add the following required variables:

* `AKTO_DASHBOARD_URL`: Your Akto dashboard URL
* `AKTO_API_KEY`: [Your Akto API key](https://docs.akto.io/integrations/ci-cd-integrations/how-to/get-api-credentials) (mark as secret)
* `AKTO_TEST_ID`: [Your Akto test ID](https://docs.akto.io/integrations/ci-cd-integrations/how-to/test-id-from-akto-test)
* `WAIT_TIME_FOR_RESULT`: Time to wait for test results

<figure><img src="https://2916937215-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRc4KTKGprZI2sPWKoaLe%2Fuploads%2Fgit-blob-84b84ca7388f547a8676216bade3bb3f2657d34d%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

Save it and then hit the run button

<figure><img src="https://2916937215-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRc4KTKGprZI2sPWKoaLe%2Fuploads%2Fgit-blob-291a0a98c60d5a6712dbcbfe2e91455da79b3d4d%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

#### 3. Set Up Branch Policies \[OPTIONAL - to configure pipeline for all builds]

1. Navigate to Project Settings > Repositories
2. Select your repository branch
3. Add build policy:
   * Add build pipeline
   * Make it required

#### 4. Verify Integration \[OPTIONAL]

1. Create a new pull request
2. Verify that Akto security checks appear in the pipeline
3. Check test results in the Azure DevOps pipeline interface

### Viewing Results

1. Navigate to your pipeline run
2. Check the 'Test Stage' logs
3. Review security test results
4. Access detailed reports in Akto dashboard