What should you use?

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.

You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.

What should you use?
A . SourceGear Vault
B . Jenkins
C . Microsoft Visual SourceSafe
D . WhiteSource Bolt

View Answer

Answer: D

Explanation:

WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.

Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated de fi nitive database of open source repositories.

Reference: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/