Question
You intend to make use of Azure Artifacts to share packages that you wrote, tested, validated, and deployed.
You want to use a solitary feed to release several builds of each package. You have to make sure that the release of packages that are in development is restricted.
Which of the following actions should you take?
- A. You should make use of static code analysis.
- B. You should make use of views. Correct
- C. You should make use of dynamic code analysis.
- D. You should make use of upstream sources.
Explanation
Feed views let one feed expose only a subset of package versions, for example promoting validated versions to the @Release view while versions still in development stay only in @Local, so consumers of the release view never get them. Upstream sources pull packages in from other feeds or public registries and do not restrict what you release. Static and dynamic code analysis assess code quality and security but do not control package visibility.