Skip to main content
Integrations · Trackers

A Bug in Azure Boards, filed from the session that found it

Connect an Azure DevOps organisation and a personal access token, pick a project, and testers file a Bug work item without leaving the device session, automated run or scan in front of them.

Organisation name and a personal access token · no OAuth app to register

Azure Boards· Acme-Web

🐞 Bug #4821 — Checkout: payment step assertion failed

Type: Bug
Title: System.Title from the filing dialog
Description: Assertion failed on the payment step · Chrome 152, Windows 11
screenshot.png

Open work item →

Empty username
the PAT is the password — Azure's own scheme
Every item is a Bug
title and description, api-version 7.1
Two calls to attach
upload the bytes, then patch the relation
One-way filing
nothing is read back from Azure DevOps

What gets filed, and how

One filing turns the failure in front of you into a Bug in your Azure DevOps project, with the evidence attached.

A Bug in the project you chose

Setup lists the projects in your organisation and you pick one, which becomes the organisation default. It is one level — there is no area or iteration picker underneath it — and every work item is created as a Bug.

Two fields, mapped exactly

The title you type becomes System.Title and the body becomes System.Description, sent as a JSON-Patch to the work-items endpoint pinned to api-version 7.1. There is no separate repro-steps field; the body goes into the description.

The screenshot, carried in two calls

Azure has no single-request upload, so the bytes go up as a loose attachment first, then the work item is patched with an AttachedFile relation pointing at the URL Azure hands back. If either step fails the work item is still created and you are told the screenshot did not attach.

Your token, sent the way Azure expects

The personal access token travels as HTTP Basic authentication with an empty username and the token as the password — Azure DevOps's documented PAT scheme. There is no OAuth app to register and no bearer-token flow.

Set up once by an administrator

An admin connects the organisation name and the token under Organization, then Integrations, then Defects. Testers then file work items without ever touching or seeing the credential.

Connect, not migrate

Nothing is copied out of Azure DevOps and nothing is read back. Each filing creates a new work item in your project and records the link between it and the run that produced it.

What the work item gets, and what it does not

Filing sets two system fields on a Bug and attaches the screenshot. Everything below that line is left to the project's own template, or is not part of filing at all.

Set on the work item

  • System.Title — from the title you typed
  • System.Description — from the body you wrote
  • Work item type — always Bug
  • Attachment — the screenshot, in two calls

Left to the project default

  • Area Path and Iteration Path
  • Assigned To — arrives with nobody on it
  • Tags — none applied, none created
  • Priority and Severity
  • Repro Steps — Azure's separate field is left empty

Not part of filing

  • Other work item types — no Task, Story or custom type, and no type picker.
  • Links to a commit, branch or pull request.
  • Anything in Azure Test Plans — nothing is read or written there.
  • Status read-back — filing is one-way; closing the work item has no effect here.
Calls Azure needs to attach one screenshot — upload the bytes, then patch the relation
2
The Azure DevOps API version this integration is pinned to
7.1
How your token is encrypted at rest, with a random IV per record and an auth tag
AES-256-GCM
Bug tracker an organisation holds at a time
1

The 32-byte key lives in an environment variable outside the database, resolved lazily so a missing key breaks filing rather than boot. No API in the product returns a stored credential, so once the token is saved neither an administrator nor the settings page can read it back — you can only replace it. A raw status line, a hostname or a stack trace never reaches the screen; a 401 or 403 becomes a plain instruction to reconnect the tool.

FAQ

Frequently asked questions

Yes. A device session, an automated run or a scan that found a fault becomes a Bug work item in your Azure DevOps project, with the title and description filled and the screenshot attached. Filing is one-way — nothing is read back from Azure DevOps.

Connect Azure Boards and file the next bug from the session

Start free, paste an organisation name and a token, pick a project. The integrations overview lists everything else TestKase connects to.