Adding to WhiteSource’s existing GitLab integration, the enhancement will help programmers detect and remediate vulnerable code earlier without leaving the GitLab CI/CD pipeline  

San Francisco – January 14, 2020 – WhiteSource, the leader in open source security and license compliance management, announced today enhanced GitLab integration for the company’s developer-focused offering, WhiteSource for Developers. This enhancement adds to WhiteSource’s existing GitLab integration, giving developers alerts on open source components with known vulnerabilities earlier in the software development lifecycle, and providing clear, actionable remediation suggestions before the code ever leaves their hands. With support for the GitLab Security Dashboard, a capability available for GitLab Ultimate users, security pros can gain visibility into unresolved vulnerabilities earlier than ever and GitLab users can gain additional insight from WhiteSource.

Step 1 of 7

14%

Which of the following best describes how you currently monitor and manage systems across your hybrid cloud environment?(Required)

Multiple separate tools for different environments

Multiple separate tools for different monitoring and management functions

Single consolidated dashboard

Custom built monitoring and management solution

No full monitoring and management solution

Don’t know

How valuable would it be for your monitoring and management solution to incorporate predictive analytics to help you identify and address system issues that are critical and not waste time or effort working through all the data and “noise” that is not critical?(Required)

Extremely valuable

Moderately valuable

Somewhat valuable

Slightly valuable

Not valuable

How do you most typically address potential system issues BEFORE they impact your operations?(Required)

Automated workflows and playbooks to remediate potential issues as soon as they are detected

An orchestrated response process that leverages automation, AI, and human expertise to rapidly respond to potential issues

Advanced monitoring tools such as predictive analytics and anomaly detection to proactively identify and address potential issues

Respond to issues as they arise, using manual processes and troubleshooting techniques

A combination of automated remediation, orchestrated response, and/or proactive monitoring to address potential system issues

Don’t know

Other

What methods does your organization use to control and monitor cloud/IT spending?(Required)

Centralized procurement processes

Pre-approved budget thresholds

Automated cost monitoring tools

Department-level spending controls

Regular cost audits and reviews

Cloud cost optimization platform

Approval workflows for resource provisioning

Native financial operations tools provided by the cloud provider

No formal controls in place

Don’t know

Other

Please specify:

Which methods do you rely on most to detect security vulnerabilities in your systems?(Required)

Automated scanning tools

Manual assessments

Vendor notifications

Threat modeling (for early detection)

None of these

Don’t know

Other

Please specify:

What are the TWO most common ways you prioritize vulnerabilities to address within your environment?(Required)

Based on potential impact

Based on exploitability

Regulatory compliance requirements

Based on CVSS scores

Risk-based analysis of multiple factors

First-in-first-out approach

No formal prioritization process

Don’t know

How do you typically handle system updates and security patches?(Required)

Automated updates and patches

Manually review and apply updates and patches on a regular schedule

A combination of automation and manual review

Apply updates and patches on an as-needed basis.

Outsourced update and patch management

No defined process

Don’t know

Other

Δ

“With this new integration, developers can more easily find and fix vulnerable code without leaving the GitLab CI/CD pipeline,” said David Habusha, VP Product Management at WhiteSource, “while security professionals can leverage their WhiteSource investment to advance their shift left and further automate risk policies within the Software Development Lifecycle (SDLC).”

“We are excited to have WhiteSource as a part of GitLab’s partner program to complement our security capabilities,” said Brandon Jung, VP of Alliances at GitLab. “GitLab gives customers earlier visibility to software vulnerabilities and actionable remediation. This integration furthers our commitment to provide our customers a seamless DevSecOps experience.”

WhiteSource integration with GitLab is available with WhiteSource for Developers. Additional information regarding this integration can be found here.

About WhiteSource

WhiteSource is the leader in continuous open source security and license compliance management. Its vision is to empower businesses to develop better software by harnessing the power of open source. Industry leaders like Microsoft, IBM, and hundreds more trust WhiteSource to secure and manage the open source components in their software. For more information, please visit www.whitesourcesoftware.com