# Automate SBOM management via MS Azure DevOps extension

Our Azure DevOps extension for Helm enables seamless integration of Helm into your CI/CD workflows, automating the creation of product versions and the uploading of SBOMs to Helm. This extension can be used independently or incorporated into your existing Azure DevOps pipelines, ensuring comprehensive and up-to-date documentation of your product's components, dependencies, and vulnerabilities with minimal effort.

## Save time and effort manually maintaining SBOMs

Once configured, Helm will automatically add or update SBOMs for the appropriate product versions based on your event trigger when new or updated SBOMs are added to your connected Azure repository.

* **Efficiency:** Automates the labor-intensive process of maintaining SBOMs, allowing your team to focus on development.
* **Accuracy and consistency:** Ensures that every change in your codebase is reflected in your SBOMs.
* **Seamless integration:** Fits naturally into your existing Azure DevOps workflows, enhancing your DevOps practices without disruption.
* **Compliance and transparency:** Facilitates adherence to regulatory requirements and enhances transparency with stakeholders by providing detailed and up-to-date SBOMs.

**Getting started:**

1. To get started, you'll need Helm API access and the API credentials, as well as our Helm API URL (`api-base-url`). These credentials are your client ID and client secret. These are your Helm email and API key, respectively. [Contact us](mailto:support@medcrypt.com) to get access to the Helm API.
2. Sign in to your Azure DevOps account, then go to Azure Marketplace.
3. [Navigate to our Helm extension](https://marketplace.visualstudio.com/items?itemName=medcrypt-helm.upload-sbom\&ssr=false#overview), then click the **Get it free** button to install it to your organization.
4. In your Azure DevOps project, navigate to **Azure Pipelines** and select your existing pipeline or create a new one.
5. Add the **Medcrypt Helm Upload SBOM** task to the new or existing task.
6. Configure the **Medcrypt Helm Upload SBOM** task with the necessary parameters, including your Helm API credentials and the path to your SBOM file.&#x20;
7. Run the task. The task log will provide trace info and diagnostics during the run.

By integrating this extension into your Azure DevOps environment, you can enhance your software supply chain security and maintain accurate SBOMs with minimal effort.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://helm.docs.medcrypt.com/automate-and-integrate/automate-sbom-management-via-ms-azure-devops-extension.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
