Remediate code with Copilot for Security

Microsoft Defender for Cloud's integration with Microsoft Copilot for Security allows you to remediate Infrastructure as Code (IaC) misconfigurations that are discovered in your code repositories. Remediating an IaC finding with Copilot allows you to address security misconfigurations and vulnerabilities early in the development cycle by automatically generating Pull Requests (PRs) that correct the identified weaknesses. Remediating these misconfigurations and vulnerabilities ensure that security issues in code are addressed accurately and promptly.

Prerequisites

• Enable Defender for Cloud on your environment.
• Connect your Azure DevOps environment to Defender for Cloud.
• Configure the Microsoft Security DevOps Azure DevOps extension.
• Review and ensure you meet the DevOps security support and prerequisites requirements.
• Have access to Azure Copilot.
• Have Security Compute Units assigned for Copilot for Security.

Remediate an Infrastructure as Code scanning finding

With Copilot for Security in Defender for Cloud you can remediate recommendations.

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud.

3. Navigate to Recommendations.

4. Search for and select the Azure DevOps repositories should have infrastructure as code scanning findings resolved recommendation.

   

5. Select Reduce risk with Copilot.

   

6. Select Help me remediate this recommendation.

7. Select security check.

8. Select the appropriate description.

9. Select Select.

   

10. Review the summary of the code fix.

11. Select Submit.

12. Select the provided link.

13. Review the PR.

Once the PR is generated in your code repository, you should have a developer review and approve the PR to have it merged into the code base.

Next step