{"schema_version":"onlylabs.public_signal.v1","title":"Microsoft Repo: microsoft/security-devops-action","description":"Microsoft repo signal with public source context, captured evidence pages, related signals, and data-business radar classification.","url":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4","json_url":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4/signal.json","generated_at":"2026-06-11T03:55:32.338424+00:00","org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab","category_label":"Frontier lab","dossier_url":"https://onlylabs.fyi/labs/microsoft","dossier_json_url":"https://onlylabs.fyi/labs/microsoft/dossier.json"},"related_urls":{"signal":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4","signal_json":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4/signal.json","source":"https://github.com/microsoft/security-devops-action","lab_dossier":"https://onlylabs.fyi/labs/microsoft","lab_dossier_json":"https://onlylabs.fyi/labs/microsoft/dossier.json","analysis":"https://onlylabs.fyi/analysis/microsoft","analysis_json":"https://onlylabs.fyi/analysis/microsoft/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/microsoft/evidence.json","category":"https://onlylabs.fyi/frontier","category_json":"https://onlylabs.fyi/frontier.json","category_feed":"https://onlylabs.fyi/frontier/feed.xml","category_signals_json":"https://onlylabs.fyi/signals.json","topic":null,"topic_signals_json":null,"topic_feed":null,"data_business":{"radar":"https://onlylabs.fyi/data-radar","radar_json":"https://onlylabs.fyi/data-radar.json","opportunities":"https://onlylabs.fyi/opportunities","opportunities_json":"https://onlylabs.fyi/opportunities.json","lanes":[{"key":"safety","label":"Safety and policy","url":"https://onlylabs.fyi/data-radar/safety","json_url":"https://onlylabs.fyi/data-radar/safety/signals.json"}]}},"answer_pack":{"answer":"Microsoft published microsoft/security-devops-action (JavaScript). This repository signal exposes tooling, eval, infrastructure, or model-adjacent work before it may appear in a launch post. High-signal details: repo microsoft/security-devops-action · language JavaScript. onlylabs links this event to 1 captured evidence page and 6 related repo signals. It also maps to Safety and policy in the data-business radar.","signal_desk":"repos","source_context":{"source_url":"https://github.com/microsoft/security-devops-action","source_host":"github.com","occurred_at":"2019-08-26T22:50:23+00:00","first_seen_at":"2026-06-08T07:01:04.198092+00:00","date_source":"source","context":"JavaScript"},"context_markers":[{"label":"Lab","value":"Microsoft","source":"signal"},{"label":"Signal desk","value":"repos","source":"signal"},{"label":"Source host","value":"github.com","source":"source"},{"label":"Repository","value":"microsoft/security-devops-action","source":"source"},{"label":"Language","value":"JavaScript","source":"source"},{"label":"Stars","value":"158","source":"traction"},{"label":"Radar lane","value":"Safety and policy","source":"radar"},{"label":"Matched term","value":"security","source":"radar"},{"label":"Watch term","value":"Infrastructure","source":"evidence"},{"label":"Watch term","value":"Safety and alignment","source":"evidence"},{"label":"Watch term","value":"Agents and tool use","source":"evidence"}],"evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://github.com/microsoft/security-devops-action"],"related_signals":6,"has_source_url":true,"latest_page_fetched_at":"2026-06-11T03:55:32.338424+00:00"},"data_business":{"matches":true,"lanes":[{"key":"safety","label":"Safety and policy","url":"https://onlylabs.fyi/data-radar/safety","json_url":"https://onlylabs.fyi/data-radar/safety/signals.json"}],"matched_terms":["security"],"score":14,"reason":"Microsoft has a repo signal matching safety and policy."},"agent_handoff":{"signal_json":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4/signal.json","dossier_json":"https://onlylabs.fyi/labs/microsoft/dossier.json","analysis_json":"https://onlylabs.fyi/analysis/microsoft/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/microsoft/evidence.json","topic_signals_json":null,"topic_feed":null,"category_signals_json":"https://onlylabs.fyi/signals.json","data_radar_json":"https://onlylabs.fyi/data-radar.json","opportunities_json":"https://onlylabs.fyi/opportunities.json"},"analysis_playbook":{"objective":"Turn new repository signals into early evidence of tooling, eval, infrastructure, model-adjacent, or product work before it appears in polished launch channels.","evidence_focus":["repo name","owner","description","language","stars","source URL","first seen time","data, eval, infra, safety, and product terms"],"extraction_questions":["What technical area does this repository expose?","Does the repo imply eval, data, infrastructure, agent, or deployment work?","Is the repo new evidence for a lab direction that is not yet in writing or releases?","Which related signals should an analyst inspect next?"],"signal_questions":["What does this new repository reveal before a formal announcement exists?","What technical area does this repository expose?","Does the repo imply eval, data, infrastructure, agent, or deployment work?","Which data-business lane explains this signal: Safety and policy?","Do the 6 related repo signals show a repeated pattern?"],"output_fields":["org","repo","technical_theme","data_business_lane","evidence_url"],"data_business_relevance":"New repositories can expose organization build priorities early, especially around internal tooling, eval infrastructure, data systems, deployment, and agent workflows.","required_sources":[{"label":"signal_json","url":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4/signal.json","required":true},{"label":"source","url":"https://github.com/microsoft/security-devops-action","required":true},{"label":"dossier_json","url":"https://onlylabs.fyi/labs/microsoft/dossier.json","required":true},{"label":"analysis_evidence_json","url":"https://onlylabs.fyi/analysis/microsoft/evidence.json","required":true},{"label":"topic_signals_json","url":null,"required":false},{"label":"data_radar_json","url":"https://onlylabs.fyi/data-radar.json","required":true}],"expected_output":["one-paragraph source-grounded interpretation","data-business implication","confidence and missing evidence","recommended next source to inspect"],"prompt_seed":"Using only the linked onlylabs JSON, captured source context, and cited evidence, analyze Microsoft's repo signal \"microsoft/security-devops-action\" for frontier lab strategy and data-business implications."},"semantic_triples":[{"subject":"Microsoft","predicate":"published repo","object":"microsoft/security-devops-action","text":"Microsoft published repo microsoft/security-devops-action."},{"subject":"microsoft/security-devops-action","predicate":"is classified as","object":"repo signal","text":"microsoft/security-devops-action is classified as repo signal."},{"subject":"microsoft/security-devops-action","predicate":"belongs to","object":"repos desk","text":"microsoft/security-devops-action belongs to repos desk."},{"subject":"microsoft/security-devops-action","predicate":"has context","object":"JavaScript","text":"microsoft/security-devops-action has context JavaScript."},{"subject":"microsoft/security-devops-action","predicate":"has evidence coverage","object":"1 captured evidence page","text":"microsoft/security-devops-action has evidence coverage 1 captured evidence page."},{"subject":"microsoft/security-devops-action","predicate":"matches data-business lanes","object":"Safety and policy","text":"microsoft/security-devops-action matches data-business lanes Safety and policy."},{"subject":"microsoft/security-devops-action","predicate":"has captured page count","object":"1","text":"microsoft/security-devops-action has captured page count 1."},{"subject":"microsoft/security-devops-action","predicate":"has readable page count","object":"1","text":"microsoft/security-devops-action has readable page count 1."},{"subject":"microsoft/security-devops-action","predicate":"has related signal count","object":"6","text":"microsoft/security-devops-action has related signal count 6."},{"subject":"microsoft/security-devops-action","predicate":"has analysis playbook objective","object":"Turn new repository signals into early evidence of tooling, eval, infrastructure, model-adjacent, or product work before it appears in polished launch channels.","text":"microsoft/security-devops-action has analysis playbook objective Turn new repository signals into early evidence of tooling, eval, infrastructure, model-adjacent, or product work before it appears in polished launch channels.."},{"subject":"microsoft/security-devops-action","predicate":"has source host","object":"github.com","text":"microsoft/security-devops-action has source host github.com."},{"subject":"microsoft/security-devops-action","predicate":"has lab","object":"Microsoft","text":"microsoft/security-devops-action has lab Microsoft."},{"subject":"microsoft/security-devops-action","predicate":"has signal desk","object":"repos","text":"microsoft/security-devops-action has signal desk repos."},{"subject":"microsoft/security-devops-action","predicate":"has source host","object":"github.com","text":"microsoft/security-devops-action has source host github.com."},{"subject":"microsoft/security-devops-action","predicate":"has repository","object":"microsoft/security-devops-action","text":"microsoft/security-devops-action has repository microsoft/security-devops-action."},{"subject":"microsoft/security-devops-action","predicate":"has language","object":"JavaScript","text":"microsoft/security-devops-action has language JavaScript."},{"subject":"microsoft/security-devops-action","predicate":"has stars","object":"158","text":"microsoft/security-devops-action has stars 158."},{"subject":"microsoft/security-devops-action","predicate":"has radar lane","object":"Safety and policy","text":"microsoft/security-devops-action has radar lane Safety and policy."},{"subject":"microsoft/security-devops-action","predicate":"has matched term","object":"security","text":"microsoft/security-devops-action has matched term security."}]},"intelligence":{"signal_desk":"repos","answer":"Microsoft published microsoft/security-devops-action (JavaScript). This repository signal exposes tooling, eval, infrastructure, or model-adjacent work before it may appear in a launch post. High-signal details: repo microsoft/security-devops-action · language JavaScript. onlylabs links this event to 1 captured evidence page and 6 related repo signals. It also maps to Safety and policy in the data-business radar.","semantic_triples":[{"subject":"Microsoft","predicate":"published repo","object":"microsoft/security-devops-action","text":"Microsoft published repo microsoft/security-devops-action."},{"subject":"microsoft/security-devops-action","predicate":"is classified as","object":"repo signal","text":"microsoft/security-devops-action is classified as repo signal."},{"subject":"microsoft/security-devops-action","predicate":"belongs to","object":"repos desk","text":"microsoft/security-devops-action belongs to repos desk."},{"subject":"microsoft/security-devops-action","predicate":"has context","object":"JavaScript","text":"microsoft/security-devops-action has context JavaScript."},{"subject":"microsoft/security-devops-action","predicate":"has evidence coverage","object":"1 captured evidence page","text":"microsoft/security-devops-action has evidence coverage 1 captured evidence page."},{"subject":"microsoft/security-devops-action","predicate":"matches data-business lanes","object":"Safety and policy","text":"microsoft/security-devops-action matches data-business lanes Safety and policy."}]},"signal":{"id":"613096ef-2795-47d9-9508-a87471f721c4","url":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4","json_url":"https://onlylabs.fyi/signals/613096ef-2795-47d9-9508-a87471f721c4/signal.json","source_url":"https://github.com/microsoft/security-devops-action","title":"microsoft/security-devops-action","summary":"Microsoft published a new repository. onlylabs watches repos for tooling, eval, infra, and model-adjacent work.","context":"JavaScript","kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2019-08-26T22:50:23+00:00","first_seen_at":"2026-06-08T07:01:04.198092+00:00","date_source":"source","evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://github.com/microsoft/security-devops-action"]},"facets":{"repo":"microsoft/security-devops-action","language":"JavaScript"},"traction":{"github_stars":158,"hn_points":null,"hn_comments":null,"hn_story_id":null,"hf_downloads":null,"hf_likes":null},"data_radar":{"lanes":[{"key":"safety","label":"Safety and policy","url":"https://onlylabs.fyi/data-radar/safety"}],"score":14,"matched_terms":["security"],"reason":"Microsoft has a repo signal matching safety and policy."}},"primary_evidence_page":{"url":"https://github.com/microsoft/security-devops-action","final_url":"https://github.com/microsoft/security-devops-action","title":"microsoft/security-devops-action repository metadata","http_status":200,"content_type":"application/json","capture_method":"plain","fetched_at":"2026-06-11T03:55:32.338424+00:00","bytes":13426,"raw_path":"cb8556ac9d9838dcccfd3d287550712682914749c17ce5d7c004672ac3748ba6.json","content_hash":"37643cfbe45fd39964118a312b6234defc1a5c74c92b15f777274c9ecaed2861","excerpt_chars":1200,"truncated":true,"excerpt":"microsoft/security-devops-action Description: Microsoft Security DevOps for GitHub Actions. Language: JavaScript License: MIT Stars: 158 Forks: 60 Open issues: 22 Created: 2019-08-26T22:50:23Z Pushed: 2026-06-10T14:06:39Z Default branch: main Fork: no Archived: no README: microsoft/security-devops-action (Preview) Microsoft Security DevOps (MSDO) is a command line application which integrates static analysis tools into the development cycle. MSDO installs, configures and runs the latest versions of static analysis tools (including, but not limited to, SDL/security and compliance tools). MSDO is data-driven with portable configurations that enable deterministic execution across multiple environments. For tools that output results in or MSDO can convert their results to SARIF, MSDO imports into a normalized file database for seamlessly reporting and responding to results across tools, such as forcing build breaks. Run locally. Run remotely. ![Microsoft Security DevOps](https://github.com/microsoft/security-devops-action/workflows/MSDO%20Sample%20Workflow/badge.svg) This action runs the [Microsoft Security DevOps CLI](https://aka.ms/msdo-nuget) for security analysis: * Installs the..."},"evidence_pages":[{"url":"https://github.com/microsoft/security-devops-action","final_url":"https://github.com/microsoft/security-devops-action","title":"microsoft/security-devops-action repository metadata","http_status":200,"content_type":"application/json","capture_method":"plain","fetched_at":"2026-06-11T03:55:32.338424+00:00","bytes":13426,"raw_path":"cb8556ac9d9838dcccfd3d287550712682914749c17ce5d7c004672ac3748ba6.json","content_hash":"37643cfbe45fd39964118a312b6234defc1a5c74c92b15f777274c9ecaed2861","excerpt_chars":1200,"truncated":true,"excerpt":"microsoft/security-devops-action Description: Microsoft Security DevOps for GitHub Actions. Language: JavaScript License: MIT Stars: 158 Forks: 60 Open issues: 22 Created: 2019-08-26T22:50:23Z Pushed: 2026-06-10T14:06:39Z Default branch: main Fork: no Archived: no README: microsoft/security-devops-action (Preview) Microsoft Security DevOps (MSDO) is a command line application which integrates static analysis tools into the development cycle. MSDO installs, configures and runs the latest versions of static analysis tools (including, but not limited to, SDL/security and compliance tools). MSDO is data-driven with portable configurations that enable deterministic execution across multiple environments. For tools that output results in or MSDO can convert their results to SARIF, MSDO imports into a normalized file database for seamlessly reporting and responding to results across tools, such as forcing build breaks. Run locally. Run remotely. ![Microsoft Security DevOps](https://github.com/microsoft/security-devops-action/workflows/MSDO%20Sample%20Workflow/badge.svg) This action runs the [Microsoft Security DevOps CLI](https://aka.ms/msdo-nuget) for security analysis: * Installs the..."}],"related_signals":[{"id":"8afe79f4-378b-4748-9e2a-3cf5e3253fdb","url":"https://onlylabs.fyi/signals/8afe79f4-378b-4748-9e2a-3cf5e3253fdb","source_url":"https://github.com/microsoft/Dev-Trio","title":"microsoft/Dev-Trio","context":null,"kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2026-06-08T03:41:01+00:00","first_seen_at":"2026-06-08T07:01:04.198092+00:00","date_source":"source"},{"id":"9e75fa50-dba7-4b77-9faf-166c323e3dff","url":"https://onlylabs.fyi/signals/9e75fa50-dba7-4b77-9faf-166c323e3dff","source_url":"https://github.com/microsoft/amplifier-app-paperclip","title":"microsoft/amplifier-app-paperclip","context":"TypeScript","kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2026-06-04T21:13:41+00:00","first_seen_at":"2026-06-05T20:58:41.438741+00:00","date_source":"source"},{"id":"76cacf33-54b2-4074-bec0-23944d8fb67c","url":"https://onlylabs.fyi/signals/76cacf33-54b2-4074-bec0-23944d8fb67c","source_url":"https://github.com/microsoft/create-github-app-token-via-key-vault","title":"microsoft/create-github-app-token-via-key-vault","context":"TypeScript","kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2026-06-04T18:22:49+00:00","first_seen_at":"2026-06-05T20:58:41.438741+00:00","date_source":"source"},{"id":"b2f7bcbd-9db3-4785-8a2a-2e0e0cb22ed2","url":"https://onlylabs.fyi/signals/b2f7bcbd-9db3-4785-8a2a-2e0e0cb22ed2","source_url":"https://github.com/microsoft/Enterprise-AI-Analytics-Pipeline","title":"microsoft/Enterprise-AI-Analytics-Pipeline","context":null,"kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2026-06-04T16:48:58+00:00","first_seen_at":"2026-06-05T20:58:41.438741+00:00","date_source":"source"},{"id":"51a9ec5d-5f14-45d9-b57a-db362b5d1ace","url":"https://onlylabs.fyi/signals/51a9ec5d-5f14-45d9-b57a-db362b5d1ace","source_url":"https://github.com/microsoft/fabric-org-app-template","title":"microsoft/fabric-org-app-template","context":"TypeScript","kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2026-06-03T18:26:42+00:00","first_seen_at":"2026-06-05T20:58:41.438741+00:00","date_source":"source"},{"id":"f26025da-153f-4d27-851c-7b4892602810","url":"https://onlylabs.fyi/signals/f26025da-153f-4d27-851c-7b4892602810","source_url":"https://github.com/microsoft/amplifier-bundle-amplifier-online","title":"microsoft/amplifier-bundle-amplifier-online","context":null,"kind":{"key":"repo_new","label":"Repo"},"org":{"slug":"microsoft","name":"Microsoft","category":"frontier-lab"},"occurred_at":"2026-06-03T17:26:20+00:00","first_seen_at":"2026-06-05T20:58:41.438741+00:00","date_source":"source"}]}