{"id":58157,"date":"2019-11-22T10:45:07","date_gmt":"2019-11-22T18:45:07","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=58157"},"modified":"2019-11-22T10:45:07","modified_gmt":"2019-11-22T18:45:07","slug":"top-stories-from-the-microsoft-devops-community-2019-11-22","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/top-stories-from-the-microsoft-devops-community-2019-11-22\/","title":{"rendered":"Top Stories from the Microsoft DevOps Community \u2013 2019.11.22"},"content":{"rendered":"<p>After all the recent travel, I finally got to spend this week at home and recharge. It was a much-needed break, and I got to enjoy Chicago, even though the winter decided to arrive early this year. So we can make a fresh cup of tea, and enjoy some community posts on code security and mobile development!<\/p>\n<p><a href=\"https:\/\/damienaicheh.github.io\/xamarin\/azure\/devops\/2019\/11\/21\/reuse-your-azure-devops-pipeline-en.html\" target=\"_blank\" rel=\"noopener noreferrer\">How to reuse your Azure DevOps pipeline between your projects<\/a><br>\nCode reuse has been a best practice for decades. But when we got into deployment automation, we seemed to forget how many issues can be caused by duplicating and maintaining the same implementation in multiple places. Can we reuse Azure Pipelines, and make sure that all of our future changes are applied across the board? Yes, and it gets easier with YAML! This article from Damien Aicheh shows us how to break down and reuse our Azure YAML pipeline across multiple projects, using an Android app as an example. Thank you, Damien!<\/p>\n<p><a href=\"https:\/\/montemagno.com\/azure-devops-settings-for-xamarin-ios-13-and-android-10-apps\/\" target=\"_blank\" rel=\"noopener noreferrer\">Azure DevOps Settings for Xamarin iOS 13 and Android 10 Apps<\/a><br>\nSpeaking of Android apps, Visual Studio 2019 recently got updated to support the recent versions of mobile development environments. Unfortunately, the update may have broken the hosted builds for some folks. This post from James Montemagno shows the updates needed in Azure DevOps to make sure your Xamarin builds are running successfully. Thank you, James!<\/p>\n<p><a href=\"https:\/\/jessehouwing.net\/99-percent-of-code-isnt-yours\/\" target=\"_blank\" rel=\"noopener noreferrer\">99% of code isn&#8217;t yours<\/a><br>\nAs mentioned earlier, code reuse helps us be more productive and less error-prone. Hence, it is mostly great news that we are, according to some reports, sharing the vast majority of our code today. This, however, means that we need to be extra careful about the packages we consume. In recent years, there&#8217;s been a ramp-up in supply chain attacks, when someone infiltrates your system through a third-party dependency, injecting malicious code into that dependency. This post from Jesse Houwing covers one of the potential ways to prevent such an attack in .NET projects. Thank you, Jesse!<\/p>\n<p><a href=\"https:\/\/jaspergilhuis.nl\/2019\/11\/22\/prevent-shadow-it-azure-devops-organizations\/\" target=\"_blank\" rel=\"noopener noreferrer\">Prevent \u201cshadow-IT\u201d Azure DevOps\u00a0organizations<\/a><br>\nWhen you create a new Azure DevOps organization using your work email, it gets automatically tied to your Azure Active Directory (AAD). The benefit of this is that you can easily add your coworkers to the organization. The downside, however, is that large enterprises might not be aware of all the organizations created under their AAD. Read this post from Jasper Gilhuis to learn how you could set the policy to restrict permissions for creating new organizations using the company AAD.<\/p>\n<p><a href=\"https:\/\/gregorsuttie.com\/2019\/11\/18\/microsoft-security-code-analysis-for-azure-devops-part-3-binskim\/\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Security Code Analysis for Azure DevOps \u2013 Part 3\u00a0BinSkim<\/a><br>\nAs security is top of mind for everyone, we recently released a new set of security tools for Azure DevOps called <a href=\"https:\/\/secdevtools.azurewebsites.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Security Code Analysis<a\/>. In this post, Gregor Suttie covers the tool called BinSkim, an open-source tool that validates the compiler\/linker settings. Check out Gregor&#8217;s other posts in the series to learn about what else is in the toolkit!<\/p>\n<p>If you\u2019ve written an article about Azure DevOps or find some great content about DevOps on Azure, please share it with the #AzureDevOps hashtag on Twitter!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After all the recent travel, I finally got to spend this week at home and recharge. It was a much-needed break, and I got to enjoy Chicago, even though the winter decided to arrive early this year. So we can make a fresh cup of tea, and enjoy some community posts on code security and mobile development!<\/p>\n","protected":false},"author":5397,"featured_media":54064,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[224,229],"tags":[],"class_list":["post-58157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-community"],"acf":[],"blog_post_summary":"<p>After all the recent travel, I finally got to spend this week at home and recharge. It was a much-needed break, and I got to enjoy Chicago, even though the winter decided to arrive early this year. So we can make a fresh cup of tea, and enjoy some community posts on code security and mobile development!<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/58157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/5397"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=58157"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/58157\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/54064"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=58157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=58157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=58157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}