Skip to content

Latest commit

 

History

History
26 lines (14 loc) · 1.21 KB

challenge09.md

File metadata and controls

26 lines (14 loc) · 1.21 KB
Raw

What the Hack: DevOps

Challenge 9 – Azure Pipelines: OSS Scanning with WhiteSource Bolt

Back - Home

Introduction

Azure DevOps is a very open platform. You can not only swap out major components, for example if your company has an investment in Jenkins or Octopus Deploy can use them instead of Azure Pipelines and still take advantage of other Azure DevOps services like Azure Repos, Azure Boards, etc.

You can also integrate 3rd party tools, into your Azure DevOps workflow. In this exercise we are going to add support for WhiteSource Bolt. It is a Free developer tool for finding and fixing open source vulnerabilities. Find out more about it by reviewing the following article.

  1. WhiteSource Bolt For Azure DevOps

Challenge

In this challenge we will deploy WhiteSource Bolt to scan our source code to see if we have any issues with our OSS dependencies.

  1. Follow the directions in the above article to install WhiteSource Bolt
  2. Add a task to your Pull Request Build to run WhiteSource Bolt

Success Criteria

  1. Run your build again, what vulnerabilities were found?

Back - Home