Open Source Scanning in Visual Studio Team Services with WhiteSource Bolt
Mar 7, 2017Sam Guckenheimer
Summary
This post introduces WhiteSource Bolt, an extension for Visual Studio Team Services (VSTS) that scans for open-source vulnerabilities and license compliance directly within build and release pipelines. It provides reports on vulnerable components and recommended fixes, with a trial mode and integration with Visual Studio Enterprise subscriptions.
More from the Azure Pipelines Supply Chain Security trail
- Axios npm Supply Chain Compromise – Guidance for Azure Pipelines Customers
- Automate your open-source dependency scanning with Advanced Security
- One Pipeline to Rule Them All: Ensuring CodeQL Scanning Results and Dependency Scanning Results Go to the Intended Repository
- April Patches for Azure DevOps Server and Team Foundation Server
- Introducing Pull Request Annotation for CodeQL and Dependency Scanning in GitHub Advanced Security for Azure DevOps