GitLab and WhiteSource: the easy way to secure your open source code
Jan 14, 2020Guy Bar-Gil, Product Manager at WhiteSource
Summary
This post details the integration of WhiteSource with GitLab Ultimate to secure open-source code. It highlights how developers can find and fix open-source vulnerabilities within the GitLab UI and CI/CD pipeline. The integration provides insights into vulnerable open-source components and dependencies directly in merge requests and the GitLab Security Dashboard, alongside other scan results. It emphasizes the partnership's goal to enable developers to use open-source components without compromising security, speed, or agility.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting