Analysis of GitHub Advanced Security: Security Integration in GitHub and Azure DevOps

doi:10.3390/fi18020099

Return

Analysis of GitHub Advanced Security: Security Integration in GitHub and Azure DevOps

2026-02-14

Vladislav Manolov

Daniela Gotseva

Nikolay Hinov *

DOI：10.3390/fi18020099

Original

Save

View PDF

Abstract

En 中文

This paper examines the integration and operationalization of GitHub Advanced Security (GHAS) across GitHub and Azure DevOps to enhance DevSecOps practices in cloud-native software delivery. As organizations increasingly adopt continuous integration and continuous deployment (CI/CD) pipelines, embedding security into every stage of development has become essential to protect the software supply chain. This study explores how GHAS can unify security governance across these two major Microsoft platforms by enabling consistent code scanning, secret detection, and dependency analysis within developer workflows. The methodology involves evaluating GHAS features and configurations in GitHub and Azure DevOps, analyzing feature parity, deployment models, and integration patterns, and identifying architectural approaches that support enterprise scalability. Implementation details include CodeQL customization, secret-scanning configurations, and dependency-management workflows, supported by real-world pipeline examples. Findings indicate that both GitHub and Azure DevOps benefit from GHAS through strong native integration, actionable security feedback, and automated protection embedded directly into development workflows. GHAS enhances vulnerability visibility, supports compliance enforcement, and strengthens collaboration between security and engineering teams. The study concludes that effective DevSecOps maturity requires standardized security automation and governance across platforms. GHAS provides a unified, scalable solution that aligns developer productivity with enterprise-grade security objectives in multi-environmental ecosystems.

Keywords:

DevSecOps

DevOps

CI/CD pipelines

secure software development

cybersecurity

security integration

security automation

Azure DevOps

GitHub

GitHub Advanced Security (GHAS)

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.