Microsoft APM Setup: Pin Agent Skills and MCP Servers in apm.yml, Lock Them, and Review Dependabot Update PRs
Microsoft APM tutorial: pin a skill package and MCP server in apm.yml, commit a SHA lockfile, gate CI with --frozen and audit, then review Dependabot PRs.
Read the story