The Problem

I was recently doing some initial testing around the migration of a client’s Azure DevOps Server 2019 to Azure DevOps Services. The basic process is

1. Upgrade to the current version of Azure DevOps Server, currently 2022.2
2. Validate the Team Project Collection (TPC) to be migrated, fixing any issues …

Problem Space

Role assignments are one of those areas in Azure that look simple on the surface, but can become awkward pretty quickly once you start automating them properly.

Anyone who has worked with RBAC through IaC for long enough will usually run into the same set of problems.

There are usually three things in …

Over the last few years, Azure Logic Apps Standard has become a core building block for many integration workloads. The platform gives us flexibility, connector richness, and scalable runtime options, but as workflow solutions grow, so does the risk profile.

In many teams, validation still leans heavily on run history …

The Problem

Due to recent changes at NIST and the way they host the NVD DB the dependency-check/DependencyCheck tool that underpins the Azure DevOps OWASP Dependency Check is struggling to download the vulnerabilities DB.

This is all discussed in this support thread. The root cause of the problems is a mixture of many …

The Problem

I have posted in the past about caching the National Vulnerability Database (NVD) used by Jeremy Long’s DependencyCheck tool via the associated Azure DevOps task.

Today I had an issue that on one pipeline the Azure DevOps task was reporting the following error

Starting: Dependency Check …

The Problem

I recently came across a problem with a complex BitTalk solution being built in an Azure DevOps Pipeline. It had been working fine, but it started to fail with error related to failing to copy built DLLs from the obj folder to the bin folder because it said the files were in use by MSBuild.

The Analysis

I …