Azure DevOps Extensions — Part 6

40+ Extensions for Accessibility, Build/Release, Code Quality & Security, Testing & more.

Get Bill Musgrave’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Azure DevOps extensions are add-ons that enhance and extend the functionality of Azure DevOps Services and Azure DevOps Server. They’re created and published by Microsoft and third-party developers. There are add-ons to customize, automate, and integrate Azure DevOps (Boards, Repos, Pipelines, etc.) via the Visual Studio Marketplace.

Types of Extensions

• Task Extensions: Provide custom build and release tasks for pipelines, enabling specific actions during CI/CD processes.
• Widget Extensions: Add custom widgets to Azure DevOps dashboards, offering visualizations or information from external sources.
• Service Hooks Extensions: Integrate with external services, providing custom service hook handlers for specific integrations.
• Hub Extensions: Customize and extend the Azure DevOps user interface, including navigation, menus, and forms.
• Custom Azure Boards Add-ins: Extend Azure Boards capabilities with custom controls and experiences for work items.

Considerations

• Security: Especially with third-party extensions, carefully review the publisher, permissions requested, and reviews. Validate publisher trustworthiness, review permissions (OAuth scopes), and rely on Microsoft’s validation for public extensions.
• Cost: Be aware of pricing models for paid extensions and factor that into your decision.
• Performance: While extensions are designed to be lightweight, poorly designed or excessive extensions could potentially impact performance. Monitor your Azure DevOps organization after installing new extensions.
• Maintenance: Keep your extensions updated to benefit from bug fixes, new features, and security patches.

By strategically using extensions, you can significantly enhance the value and effectiveness of your Azure DevOps platform and drive improved software development processes. Don’t be afraid to explore the Marketplace and experiment with extensions to discover how they can benefit your team!

Accessibility

1. Accessibility Testing: An extension that provides an accessibility checker build and release task.

Azure Boards

1. Estimate: Enhance your sprint planning sessions with the Planning Poker for Azure DevOps extension.
2. Retrospectives: Provides a first-class experience for retrospectives and general feedback board scenarios.
3. Work Item Visualization: Visualize relationships between work items from within the work item form.

Azure Pipelines

1. File Creator: Create a new file during your build or release pipeline.

Build & Release Automation

1. Docker Build Task: Builds, pushes, and manages Docker containers in pipelines. Supports Azure Container Registry and Docker Compose.
2. GitHub Integration for Azure Pipelines: Connects GitHub repositories to Azure Pipelines for CI/CD. Enables GitOps workflows with automated build and release triggers.
3. Jenkins Integration: Use Jenkins for your continuous integration and continuous delivery workflows.
4. Replace Tokens: Replaces tokens in configuration files during pipelines. Supports JSON, XML, and YAML for environment-specific deployments.
5. Terraform: Manages infrastructure provisioning across AWS, Azure, and GCP. Integrates Terraform CLI into pipelines for stateful deployments.

Code Quality & Security

1. Black Duck Security Scan: Configure your Azure pipeline to run Black Duck security testing and take action on the results.
2. Checkmarx SAST: Performs static application security testing (SAST) to identify vulnerabilities in source code. Integrates directly into pull requests.
3. Dependency-Check (OWASP): Identifies vulnerabilities in project dependencies using the OWASP Dependency-Check tool. Supports Java, .NET, and Node.js.
4. Mend Bolt: Full visibility of your open source components, alerts on security vulnerabilities, and compliance issues and offers actionable remediation insights in real-time.
5. Retire.js: Scans JavaScript libraries for known vulnerabilities. Integrates with pipelines to block builds with insecure dependencies.
6. SARIF SAST Scans Tab: Adds a ‘Scans’ tab to each Build Result and Work Item for viewing associated SARIF SAST logs.
7. Secure DevOps Kit (AzSK): Collection of extensions that empower DevOps teams to build and deploy applications on Azure with security integrated at every step.
8. Snyk Security Scan: Finds and fixes vulnerabilities in open-source dependencies and container images. Provides remediation guidance.
9. SonarQube Cloud: Analyzes code quality, security hotspots, and technical debt. Supports 30+ languages and integrates with pull requests.
10. Veracode: Integrates the automated processes of Veracode Static Analysis and Veracode Software Composition Analysis, to deliver fast, repeatable results, into your Azure DevOps workflows.

Collaboration & Tools

1. Azure DevOps Open in Excel: Exports work items to Excel for bulk editing. Syncs changes back to Azure Boards for seamless updates.
2. Microsoft Teams Integration: Sends pipeline notifications and work item updates to Teams channels. Enhances cross-team visibility.
3. Pull Request Merge Conflict Extension: Resolves Git merge conflicts directly in Azure Repos. Simplifies collaboration on complex branches.
4. Slack Integration: Posts build, release, and work item updates to Slack. Customizable alerts for failures or approvals.
5. Wiki Updater: Automates updates to Azure DevOps Wikis from markdown files. Ideal for documentation-as-code workflows.

Dashboard & Reporting

1. Azure Cost Insights: Visualizes Azure cloud spending in dashboards. Tracks costs by resource group, service, or tag.
2. Delivery Plans: Visualizes work items across teams on a timeline. Aligns sprints, features, and epics for planning.
3. FlowViz: Data visualization, metrics and reporting in Power BI for Agile teams using Azure DevOps.
4. Work Item Visualization: Creates interactive diagrams of work item relationships (e.g., dependencies, hierarchies).

Deployment & Infrastructure

1. Ansible: Executes Ansible playbooks in pipelines for configuration management. Supports Linux/Windows environments.
2. Octopus Deploy: Orchestrates complex deployments across environments. Supports blue/green and canary releases.
3. Terraform Tool Installer: Installs Terraform CLI in pipelines. Works with Terraform tasks for infrastructure provisioning.

Testing & Feedback

1. Azure Load Testing: Runs cloud-scale load tests using JMeter. Identifies performance bottlenecks in applications.
2. Mabl Test Management: Integrates Mabl’s AI-driven test automation with Azure DevOps. Manages test suites and results.
3. Test & Feedback: Facilitates exploratory testing with screenshot annotations. Captures feedback directly in Azure Test Plans.

Utilities & Productivity

1. Azure Application Insights Widgets: Show Application Insights charts and metrics right on your dashboard to monitor the performance of your apps and services.
2. CatLight: The CatLight app will show desktop notifications when builds, releases, pull requests, and tasks need your attention.
3. Generate Release Notes: Generates a Release Notes in Markdown Format.
4. LightHouse CI: Lighthouse CI Extension for Azure Devops that can run lighthouse tests, assert and save your results.
5. Release Notes Generator: Automates release notes from commits and work items. Supports markdown or HTML output.
6. Website Validation: Provide the base URL of a website, the task will visit the website and also recursively all linked pages with the same base URL and check them for broken links.
7. Wiql Editor: Writes and tests WIQL (Work Item Query Language) queries. Simplifies query creation for Azure Boards.

Other Plugin Articles
1 — ESLint: 100 ESLint Plugins (over 1,900 rules) for Code Quality, Security, Testing, Performance & More.
2 — Prettier, Jest & Playwright: 110 Plugins for JavaScript/TypeScript Testing (end-to-end and unit), Code Formatting.
3 — Visual Studio Code: 36+ AI Assistant Extensions plus 85+ Extensions for JavaScript/TypeScript/Angular and more.
4 — Stylelint: Lints CSS and CSS-like languages like SCSS, Sass, Less Sass, and more.
5—Chrome Extensions: 50 AI, Development, Debugging, Layout, Testing, and Accessibility Tools.

I share lessons from decades in software delivery — from CI/CD to architecture governance. If you’re tackling similar challenges and want a seasoned perspective, I’m available for consulting at https://www.musgrave.com .