Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to ...
Microsoft AZ-400 Exam
Questions Number: 125 out of 535 Questions
23.36%
Question 125
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base. What should you use?
WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories. Azure DevOps integration with WhiteSource Bolt will enable you to: 1. Detect and remedy vulnerable open source components. 2. Generate comprehensive open source inventory reports per project or build. 3. Enforce open source license compliance, including dependencies' licenses. 4. Identify outdated open source libraries with recommendations to update. Note: Black duck would also be a good answer, but it is not an option here. Reference: https://www.azuredevopslabs.com/labs/vstsextend/WhiteSource/
