Team Services October Extensions Roundup - Rugged DevOps
Oct 11, 2016Joe Bourne
Summary
This post introduces three new extensions for Azure DevOps that enhance security and license validation for open-source components and code scanning. WhiteSource provides OSS management, real-time vulnerability alerts, and automated approval processes. HPE Security Fortify offers static code analysis (SCA) and on-demand security assessments (static and dynamic). Checkmarx provides static source code analysis with features like incremental scanning and best fix location. These extensions enable 'shifting left' security practices.
More from the Azure Pipelines Supply Chain Security trail
- Axios npm Supply Chain Compromise – Guidance for Azure Pipelines Customers
- Automate your open-source dependency scanning with Advanced Security
- One Pipeline to Rule Them All: Ensuring CodeQL Scanning Results and Dependency Scanning Results Go to the Intended Repository
- April Patches for Azure DevOps Server and Team Foundation Server
- Introducing Pull Request Annotation for CodeQL and Dependency Scanning in GitHub Advanced Security for Azure DevOps