Skip to main content

Golden PR for Azure DevOps

Sonatype IQ Server plugin for Azure DevOps creates a Pull Request (PR) comment, if it is able to determine a Golden Version of the component that can remediate the policy violation.

The Golden Version of the component is defined as recommended-non-breaking-with-dependencies.

Examples:

1. A top-level PR comment for a Golden Version of a component will be seen as below. The version upgrade information indicates that bumping to a version will resolve all policy violations for this component (including its dependencies) and result in no breaking changes.

Azure_top_level_comment.png

2. A PR line comment will be seen as below. The Golden Version of the component is indicated by a gold star.

Azure_line_comment.png