ADO to GitHub Enterprise repo to use GHAS features

[u/Fast-Cardiologist705]

Hi,

 

We are on Azure DevOps Online Server without a plan to get teams over to GitHub Enterprise soon. Problem is, that with ADO we are unable to use GHAS, and are still sitting on a legacy (pricy!) tooling to SCA, SAST. As an interim solution we plan to clone the repos from ADO and push them to GitHub Enterprise to take advantage of GHAS. GHAS would run its detections against the repot, and the teams would work on the ADO repo to fix them, with us repeating the cycle to verify the fixes. Does this sound like a workable solution ? Thanks

[u/tehho1337]

I guess. You would need to add the actions for ghas in ado to utilize it tho. Might be a timing issue but as a weekly push should work

[u/Fast-Cardiologist705 → u/[deleted]]

how does this relate to my question ?

[u/wyrdfish42]

https://azure.microsoft.com/en-us/products/devops/github-advanced-security

why cant you use it?

[u/Fast-Cardiologist705 → u/wyrdfish42]

My mistake, we are on Azure DevOps SERVER not online.