WhiteSource - Overview

WhiteSource plug-in provides for the management of open source components security, licenses, and maintenance throughout a software development cycle. It identifies the open source components within a software development lifecycle with security or compliance issues. When issues are detected alerts and remediation assistance is provided. The WhiteSource plug-in integrates with WhiteSource to retrieves license risks and security vulnerabilities data from WhiteSource scan results to include in an DevOps Velocity metric.

Compatability

This plug-in requires DevOps Velocity version 2.4 and later.

Versions

DevOps Velocity plug-in images are located in DockerHub. To view available versions, see the UrbanCode DockerHub.

History

Version 2.0.15

• Converted to scheduled event plug-in.
• Added a custom field mapping for pipeline.
• Works on product and project level.

Version 1.0.14

• User Access Key Related Changes

Version 1.0.14

• Bug fix