Plugins/Community Based Plugins/Microsoft Defender for Cloud Custom plugin Scenarios/DevSecOpsCustomPlugInWithMDC/GetLastDevSecOpsAlerts.yaml [15:38]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
          These results are the alerts produced by the Code Scanning (CodeQL), Dependency Scanning (Dependabot), Secret Scanning and Infrastructure as Code (IaC)
          scanning made by GitHub Advanced Security (GhAS) in GitHub and by GitHub Advanced Security for Azure DevOps (GAzDO) in Azure DevOps.
          Each of these recommendations includes these fields 
              AssessedResourceType (AdoRepo for Azure DevOps repository, GitHubRepo for GitHub repository), 
              RepositoryUri (URL of the repo in Azure DevOps or GitHub), 
              Category (Code for Code Scanning with CodeQL, dependency for dependency scanning, secrets for secrets scanning and infrastruture as code for IaC scanning), 
              RecommendationSeverity, 
              RecommendationState, 
              RecommendationName, 
              AssessedResourceId, 
              Description, 
              CodeQLRuleName (name of the CodeQL rule that raised the alert - Only for Code scanning alerts), 
              CodeQLRuleDescription (description of the CodeQL rule that raised the alert - Only for Code scanning alerts), 
              CodeQLRuleSeverity (severity of the CodeQL rule that raised the alert - Only for Code scanning alerts), 
              CodeQLFile (file identified by the CodeQL rule that raised the alert - Only for Code scanning alerts and secrets scanning alerts), 
              CodeQLLine (line in the file identified by the CodeQL rule or by the secret scanning that raised the alert - Only for Code scanning alerts and secrets scanning alerts), 
              IaCFile (file identified by the Infrastructure as Code [IaC] rule that raised the alert - Only for Code IaC alerts), 
              State, 
              Tool_name (name of the tool that raised the alert), 
              DepSecurityAdvisoryCVE (CVE for the dependency - only for dependency scanning), 
              DepSecurityAdvisoryCVSS (CVSS of the CVE for the dependency - only for dependency scanning),
              DepSecurityAdvisoryLink (Link for the CVE for the dependency - only for dependency scanning),
              DepSecurityVulnPkgType (Type of package of the dependency with the CVE - only for dependency scanning),
              DepSecurityVulnPkgName (Name of package of the dependency with the CVE - only for dependency scanning),
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



Plugins/Community Based Plugins/Microsoft Defender for Cloud Custom plugin Scenarios/DevSecOpsCustomPlugInWithMDC/GetLastDevSecOpsAlerts.yaml [82:105]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
          These results are the alerts produced by the Code Scanning (CodeQL), Dependency Scanning (Dependabot), Secret Scanning and Infrastructure as Code (IaC)
          scanning made by GitHub Advanced Security (GhAS) in GitHub and by GitHub Advanced Security for Azure DevOps (GAzDO) in Azure DevOps.
          Each of these recommendations includes these fields 
              AssessedResourceType (AdoRepo for Azure DevOps repository, GitHubRepo for GitHub repository), 
              RepositoryUri (URL of the repo in Azure DevOps or GitHub), 
              Category (Code for Code Scanning with CodeQL, dependency for dependency scanning, secrets for secrets scanning and infrastruture as code for IaC scanning), 
              RecommendationSeverity, 
              RecommendationState, 
              RecommendationName, 
              AssessedResourceId, 
              Description, 
              CodeQLRuleName (name of the CodeQL rule that raised the alert - Only for Code scanning alerts), 
              CodeQLRuleDescription (description of the CodeQL rule that raised the alert - Only for Code scanning alerts), 
              CodeQLRuleSeverity (severity of the CodeQL rule that raised the alert - Only for Code scanning alerts), 
              CodeQLFile (file identified by the CodeQL rule that raised the alert - Only for Code scanning alerts and secrets scanning alerts), 
              CodeQLLine (line in the file identified by the CodeQL rule or by the secret scanning that raised the alert - Only for Code scanning alerts and secrets scanning alerts), 
              IaCFile (file identified by the Infrastructure as Code [IaC] rule that raised the alert - Only for Code IaC alerts), 
              State, 
              Tool_name (name of the tool that raised the alert), 
              DepSecurityAdvisoryCVE (CVE for the dependency - only for dependency scanning), 
              DepSecurityAdvisoryCVSS (CVSS of the CVE for the dependency - only for dependency scanning),
              DepSecurityAdvisoryLink (Link for the CVE for the dependency - only for dependency scanning),
              DepSecurityVulnPkgType (Type of package of the dependency with the CVE - only for dependency scanning),
              DepSecurityVulnPkgName (Name of package of the dependency with the CVE - only for dependency scanning),
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



