WhiteSource Examples

Azure DevOps

• Using WhiteSource Unified Agent in an NPM build pipeline

Language Specific Scan Examples

Files beginning with "github" are for GitHub Actions.

• Add the yml file to a subfolder named workflows underneath the .github folder in the branch you would like to scan and adjust branch triggers (on:) within the yml file.
• Add a repository secret named "APIKEY" to the repository with your WhiteSource API Key from the Integrate page

Files labeled azure-pipelines.yml are for use with Azure DevOps and can be added directly to the repository.

• Add a pipeline variable named "apikey" with your WhiteSource API Key from the integrate page

Java

Security Shepherd

A web application built with Maven using JDK 11. Mobile application is currently excluded for the scan.

WebGoat

A multi module web application built with Maven using JDK 11.