"Security vulnerabilities don't fix themselves. Someone needs to track them, prioritize them, and actually ship the fix. If you've ever tried to manage security alerts alongside your regular sprint work, though, you know the friction: you're looking at an alert in one tab, switching to your backlog in another, trying to remember which vulnerability you were supposed to file a bug for."
"You can link from either direction: from an alert to a work item, or from a work item to an alert. Once linked, you can navigate back and forth with one click when you need context. You'll also see which alerts have a linked worked item in the repository's Advanced Security tab: Try it out Open an alert in your Advanced Security hub and click "Add" next to the Related Work section to link it to a work item."
Work item linking connects GitHub Advanced Security alerts with Azure DevOps Boards work items so teams can assign ownership and track fixes. Links can be created from an alert to a work item or from a work item to an alert, enabling one-click navigation between the two. The repository's Advanced Security tab indicates which alerts have linked work items. Users can add links by choosing Related Work in an alert or by selecting Advanced Security Alert as a link type when creating a work item. The integration respects existing permissions and only applies to Advanced Security alerts in Azure DevOps.
Read at Azure DevOps Blog
Unable to calculate read time
Collection
[
|
...
]