Azure DevOps

CI/CD 5 steps

Azure DevOps connects your repositories, work items, and pipelines to an investigation. Antimetal uses a read-only Personal Access Token to inspect repos, pull requests, work items, pipelines, wikis, and test plans.

01 Capabilities

What Antimetal does with Azure DevOps

  • Read repositories, branches, commits, and pull requests to find the change that caused a failure
  • Inspect build definitions, runs, and logs to see which pipeline broke and where
  • Read work items and queries for the context behind a change
  • Search wikis and test plans for the runbook or coverage relevant to the failure
02 Setup

Connecting Azure DevOps

Only connect this if your team uses Azure DevOps for source control, work items, or pipelines. It is not required for the Azure cloud integration.

Prerequisites

  • An Azure DevOps organization
  • Permission to create Personal Access Tokens
  • Access to the projects you want Antimetal to inspect
  1. 01

    Open Personal Access Tokens

    In Azure DevOps, click your profile icon and select User Settings > Personal Access Tokens.

  2. 02

    Create a new token

    Click + New Token, name it Antimetal, select the organization, set an expiration matching your rotation policy, and choose Custom defined scopes.

  3. 03

    Grant read-only scopes

    Select Read only for Code, Work items, Build, Test Management, Wiki, and Project and team. Do not enable any write, manage, or execute scopes. See Microsoft's Personal Access Tokens guide.

  4. 04

    Create and copy the token

    Click Create, then copy the token value — it is only shown once.

  5. 05

    Share the token with Antimetal

    Paste your Organization URL (https://dev.azure.com/<your-org>) and the Personal Access Token, then click Connect.

03 Access

Permissions and access

Antimetal uses a read-only PAT. No write operations are performed in your Azure DevOps organization. Tokens are stored encrypted. Azure DevOps PATs have a maximum one-year lifetime — rotate before expiration and update the credential in Antimetal. Revoke access at any time by deleting the token.

ScopeAccess
CodeRead repositories, branches, pull requests, commits, file contents
Work itemsRead work items, queries, iterations
BuildRead build definitions, runs, logs, artifacts
Test ManagementRead test plans, suites, and results
WikiRead wiki pages and search
Project and teamRead project and team metadata

All tenant data is processed in isolated environments. See security and compliance for details.

Need help?

Contact us via Slack or at support@antimetal.com.

Product

  • Agentic Production Engineering

Compliance

All systems normalBuilt in NYC

The autonomous system for production.
SOC 2, GDPR, and HIPAA compliant.