Using AzSK locally to check the security of our Azure infrastructure is already a good improvement in integrating security into DevOps practices.
However, if you want to ensure continuous checking and avoid doing it manually, you must integrate the execution of AzSK into the CI/CD pipelines that provision your infrastructure. One of the advantages of AzSK is that it integrates very well with Microsoft's DevOps tool, that is, Azure Pipelines.
We have already discussed Azure Pipelines in this book, in particular in Chapter 6, Continuous Integration and Continuous Delivery; Chapter 7, Containerizing Your Application with Docker; and Chapter 10, Static Code Analysis with SonarQube, so the purpose of this section ...
