Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common

The correct answer is C. WhiteSource. WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silentl

Submitted by devops_kid· Mar 6, 2026Develop a security and compliance plan

Question

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base. What should you use?

Options

APDM
BOWASPZAP
CWhiteSource
DJenkins

How the community answered

(39 responses)

A
5% (2)
B
15% (6)
C
74% (29)
D
5% (2)

Explanation

WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated deﬁnitive database of open source Azure DevOps integration with WhiteSource Bolt will enable you to: 1. Detect and remedy vulnerable open source components. 2. Generate comprehensive open source inventory reports per project or build. 3. Enforce open source license compliance, including dependencies’ licenses. 4. Identify outdated open source libraries with recommendations to update. Note: Black duck would also be a good answer, but it is not an option here.

Community Discussion

No community discussion yet for this question.

Full AZ-400 Practice