Container images and infrastructure-as-code carry their own risk surface. DevOps Shield templates add image and IaC scanning so misconfigurations are caught in the pipeline.

How it works

  1. Add the container image scanning template to your build.
  2. Add the IaC scanning template for Terraform, Bicep, or ARM.
  3. Set severity gates that fail the build on critical findings.
  4. Publish results as SARIF for centralized triage.
  5. Promote only images and templates that pass the gate.