Configuring Azure DevOps Priority Tags

When using Azure DevOps to track and monitor security issues, Vanta detects the priority from the Azure DevOps Priority field.

Azure DevOps indicates priority value as “1, 2, 3, 4,” etc. Vanta handles priority values as P0, P1, P2, and P3.

Since Azure DevOps does not have an equivalent P0 option, Vanta accounts for this offset by mapping the priorities from Azure DevOps as follows: 

  • Priority 1 = P0 in Vanta (High)
  • Priority 2 = P1 in Vanta (Medium)
  • Priority 3 = P2 in Vanta (Low)
  • Priority 4 = P3 in Vanta (Lowest)

Common Issues 

If you notice security issues in a test that do not represent their intended security priority, we suggest testing setting the Azure DevOps Priority field as the value that best matches the mapping above.

 

image (19).png

 

Updated