| Link commits and PRs to Azure Boards work items | Boards-GitHub integration, AB#id |
| Diagram in a wiki as text | Mermaid in Markdown |
| Call another system on an event | Webhook / service hook |
| Frequent deploys, strong tests, no long branches | Trunk-based + feature flags |
| Maintain several shipped versions | Release branches |
| Enforce reviews and builds before merge | Branch policy (Azure Repos) / branch protection (GitHub) |
| Large binaries in Git | Git LFS |
| Very large repository performance | Scalar, partial clone, sparse checkout |
| Undo a pushed commit safely | git revert |
| Find a deleted branch’s commits | git reflog |
| Secret committed | Rotate, then rewrite history |
| Same steps in many pipelines | Templates / reusable workflows |
| Approval that YAML edits cannot remove | Environment check |
| Private network build access, low upkeep | Scale set agents / self-hosted runners |
| Promote tested packages | Azure Artifacts views |
| Breaking change in SemVer | Increment MAJOR |
| Instant rollback, near-zero downtime | Blue-green / slot swap |
| Limited exposure first | Canary or ring |
| Switch a feature on without deploying | Feature flag, App Configuration |
| On-demand environments from approved templates | Azure Deployment Environments |
| Azure deployment without stored secret | Workload identity federation (OIDC) |
| Code on an Azure resource calls Azure | Managed identity |
| Per-run token inside a workflow | GITHUB_TOKEN |
| Central secret store | Azure Key Vault |
| File secrets in pipelines | Secure files |
| Vulnerable dependencies | Dependabot, dependency review |
| Code vulnerabilities | CodeQL |
| Pipeline and code findings in cloud security view | Defender for Cloud DevOps security |
| Request flow across services | Application Insights distributed tracing |
| Probe site from other regions | Availability test |
| AKS pod metrics | Container insights |