The integration, WhiteSource for Azure Repos, gives developers full-spectrum application security that enables automated remediation without slowing development
TEL AVIV AND BOSTON – January 26 – WhiteSource, a leader in open source security and management, today released an Azure DevOps repository integration, allowing Azure DevOps users to detect all open source components and automatically enforce security policies directly from their repository. Users can now receive alerts on vulnerabilities along with detailed remediation information, including suggested fixes and prioritization advice, all in the comfort of their native environment, free from the burden of learning a new user interface (UI).
As the time-to-market for applications becomes shorter each year, software development teams are challenged with accelerating their processes without compromising on security. Many Software Composition Analysis (SCA) vendors scan for vulnerabilities in the repository, but only provide results exclusively in their own UI, which slows the development process down. The WhiteSource for Azure Repos integration automatically scans open source code for security vulnerabilities or license violations on every merge request, before the code is merged. If a merge request introduces a new error, the developer is given immediate feedback to resolve any newly introduced vulnerabilities. Positive feedback is given when a pull request resolves vulnerabilities. This differential view between feature branches and mainline branches prevents interruptions to workflows. In addition to WhiteSource’s existing integrations with all major code repositories, including GitHub, GitHub Packages, JFrog, Bitbucket, and GitLab, the new WhiteSource for Azure Repos integration allows users to generate inventory, security, and compliance reports.
With the WhiteSource for Azure Repos cloud-based integration, users can:
“Scanning for vulnerabilities within the repository is the ‘furthest left’ organizations can shift their security efforts while still enforcing policies and requiring all developers to scan their code,” said Ori Bach, Executive Vice President of Product at WhiteSource. “The cost of remediating vulnerabilities is higher the further you progress into your software development life cycle. With the WhiteSource for Azure Repos integration, developers can receive feedback on their code when it is fresh in their minds, making it easier to remediate vulnerabilities while helping organizations ultimately save time and money.”
Learn more about the WhiteSource repository integration with Azure DevOps here.