Skip to content

ALM and pipelines

Changes reach production through a pipeline with an approval, not by hand.

21checks

In short

ALM and pipelines is one of the 11 core modules in The Governor, Ustrema's governance app for Microsoft Power Platform, Copilot Studio and agents. It runs 21 checks every week to answer one question: How did that change get into production? Every failing check becomes a finding with an owner, closed with Power Platform pipelines, Azure DevOps, GitHub, Solution checker.

The question it answers

How did that change get into production?

What it measures

Each of the 21 checks looks for patterns like these, in every environment, every week:

  • Unmanaged solutions in production
  • Pipelines with no approval before production
  • Pipelines that deploy to unmanaged targets, which Microsoft blocks from October 2026
  • Makers with customiser rights in production

What you get

Once the findings are closed and the controls are in place, your tenant has:

  • DEV, TEST and PROD with managed solutions
  • An approval gate on the way to production
  • Optional Pipelines Approvals extension module: rules and approvers for every gated stage

Microsoft services it works with

The Governor checks that these Microsoft controls are on, and our experts configure them:

  • Power Platform pipelines
  • Azure DevOps
  • GitHub
  • Solution checker
The service that closes these findingsALM, pipelines and safe delivery

Questions about this module

Is ALM and pipelines included in the platform licence?

Yes. All 11 core modules, ALM and pipelines included, come with one platform licence per tenant per year. There are no per-user fees. Extension modules are added separately.

How often does The Governor check alm and pipelines?

Every week. The scan runs inside your own tenant, measures all 21 checks again and shows what closed, what is still open and what came back since the last scan.

Which Microsoft services does it work with?

Power Platform pipelines, Azure DevOps, GitHub, Solution checker. The Governor checks that they are switched on and configured, and Ustrema consultants set them up when they are not.

Sources

The primary documentation and law this page relies on. Each link opens the original source.