You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/ci-cd-custom-content.md
+6-8Lines changed: 6 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,15 +19,12 @@ ms.collection: usx-security
19
19
20
20
---
21
21
22
-
# Manage content as code with Microsoft Sentinel repositories (preview)
22
+
# Manage content as code with Microsoft Sentinel repositories
23
23
24
24
Microsoft Sentinel repositories let you deploy and manage custom Sentinel content from an external source control repository for continuous integration/continuous delivery (CI/CD). This automation removes the need for manual processes to update and deploy your custom content across workspaces. A subset of content as code is *detections* as code (DaC). Microsoft Sentinel **Repositories** implements DaC as well.
25
25
26
26
For more information on Sentinel content, see [About Microsoft Sentinel content and solutions](sentinel-solutions.md).
27
27
28
-
> [!IMPORTANT]
29
-
> The Microsoft Sentinel **Repositories** feature is currently in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for more legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
30
-
31
28
## How Microsoft Sentinel repositories work
32
29
33
30
You can deploy these Microsoft Sentinel custom content types from an external source control repository you connect to Microsoft Sentinel:
@@ -56,7 +53,6 @@ Creating a connection to a repository requires an **Owner** role in the resource
56
53
57
54
If you find content in a public repository where you aren't a contributor, first import, fork, or clone the content to a repo where you're a contributor. Then connect your repo to your Microsoft Sentinel workspace. For more information, see [Deploy custom content from your repository](ci-cd.md).
58
55
59
-
60
56
### Maximum connections and deployments
61
57
62
58
- Each Microsoft Sentinel workspace is currently limited to **five repository connections**.
@@ -112,9 +108,10 @@ Smart deployments are enabled by default on newly created connections. If you pr
112
108
113
109
Consider the following customization options when deploying content with Microsoft Sentinel repositories.
114
110
115
-
####Customize the workflow or pipeline
111
+
### Customize the workflow or pipeline
116
112
117
113
Customize the workflow or pipeline in one of the following ways:
114
+
118
115
- configure different deployment triggers
119
116
- deploy content only from a specific root folder for a given workspace
120
117
- schedule the workflow to run periodically
@@ -123,9 +120,10 @@ Customize the workflow or pipeline in one of the following ways:
123
120
124
121
These customizations are defined in a .yml file specific to your workflow or pipeline. For more information on how to implement, see [Customize repository deployments](ci-cd-custom-deploy.md#customize-the-workflow-or-pipeline)
125
122
126
-
####Customize the deployment
123
+
### Customize the deployment
127
124
128
125
Once the workflow or pipeline is triggered, the deployment supports the following scenarios:
126
+
129
127
- prioritize content to be deployed before the rest of the repo content
130
128
- exclude content from deployment
131
129
- specify ARM template parameter files
@@ -137,7 +135,7 @@ These options are available through a feature of the PowerShell deployment scrip
137
135
For information on managing Microsoft Sentinel repositories using the API, see the [Source Control](/rest/api/securityinsights/source-control) and [Source Controls](/rest/api/securityinsights/source-controls) actions in the Microsoft Sentinel REST API.
138
136
139
137
> [!IMPORTANT]
140
-
> Starting **June 15, 2026**, older API versions used by Microsoft Sentinel repositories will no longer be supported. If you are using APIs to create and manage repository connections, transition to API version **2025-09-01**, **2025-06-01**, or **2025-07-01-preview** before June 15, 2026 to avoid service disruption. Existing repository connections aren't affected.
138
+
> Starting **June 2026**, older API versions used by Microsoft Sentinel repositories will no longer be supported. If you are using APIs to create and manage repository connections, transition to API version **2025-09-01**, **2025-06-01**, or **2025-07-01-preview** before June 15, 2026 to avoid service disruption. Existing repository connections aren't affected.
Copy file name to clipboardExpand all lines: articles/sentinel/whats-new.md
+1Lines changed: 1 addition & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,6 +21,7 @@ The listed features were released in the last six months. For information about
21
21
## March 2026
22
22
23
23
-[Call to action: update older Microsoft Sentinel content as code (Sentinel repositories) API versions before June 15, 2026](#call-to-action-update-older-microsoft-sentinel-content-as-code-sentinel-repositories-api-versions-before-june-15-2026)
24
+
- Microsoft Sentinel repositories are now generally available. For more information, see [Manage content as code with Microsoft Sentinel repositories](ci-cd-custom-content.md).
24
25
25
26
### Call to action: update older Microsoft Sentinel content as code (Sentinel repositories) API versions before June 15, 2026
0 commit comments