With Github Advanced Security for Azure DevOps we have created a nightly build (yaml) which builds our projects and scans for vulnerabilities with the AdvancedSecurity-Dependency-Scanning@1 task.