1. Create a new Variable group, name it so that it can be identified in relation to the SOOS Task.

  2. Set the Pipeline permissions if required.  Alternatively, leave these empty to allow any pipeline to access this variable group.

  3. Add new Variables for the ApiKey and ClientId.

    • Obtain the values for these variables from the SCA and/or DAST Integration pages in the SOOS app.

    • Make sure to mark these as “Secret” values using the lock icon.

      Azure DevOps UI Add variables to pipeline permissions

  4. Link the Variable Group to your pipeline(s).

    Azure DevOps UI Link variable groups to pipelines
  5. Reference the Variables in your pipeline with the same names you used when creating the variables, such as $(ApiKey) and $(ClientId).

    Azure DevOps UI reference saved variables within pipeline jobs