Notifications
Announcements
Hello,
I’m trying to find out if it’s possible to configure DevSecOps tools like Sonarqube, OWASP ZAP etc on Power apps. I saw a thread asking about the feasibility of SAST and DAST testing on Power apps but the response wasn’t very detailed.
Kindly assist. Thank you
@ariellayo
Power Platform tools work with ADO integration.
https://learn.microsoft.com/en-us/power-platform/alm/devops-build-tool-tasks
You could integrate the Sonarqube, OWASP ZAP with Azure devops.
Power apps (Power Platform development) is different to the traditional web development. Within Microsoft there are other security controls already in place.
Unless you are using Power Pages for external users you mightn't need DevSecOps tools integration.
====================================================If I have answered your question, please mark your post as Solved.If you like my response, please give it a Thumbs Up.https://www.linkedin.com/in/devendravelegandla/
Thank you Velegandla for your response. If I get you correctly, so if I want to integrate external security testing tools to test my Power Apps applications I can do so with Azure DevOps?
I understand that there are security controls in place by Microsoft but I’d like to do my own security testing as well.
That is correct; you can integrate it as part of ADO tools.
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.
In our never-ending quest to improve we are simplifying the forum hierarchy…
We are honored to recognize Ajay Kumar Gannamaneni as our Community Spotlight for December…
These are the community rock stars!
Stay up to date on forum activity by subscribing.
WarrenBelz 721 Most Valuable Professional
Michael E. Gernaey 320 Super User 2025 Season 2
Power Platform 1919 268