AzureFunBytes Episode 58 - Improve your Open Source Security with @WhiteSourceSoft
Tags: security, opensource, cloud, webdev
Published: 2021-09-30 19:19:00

AzureFunBytes is a weekly opportunity to learn more about the fundamentals and foundations that make up Azure. It's a chance for me to understand more about what people across the Azure organization do and how they do it. Every week we get together at 11 AM Pacific on [Microsoft LearnTV](https://cda.ms/226) and learn more about Azure.

![AzureFunBytes animation](https://res.cloudinary.com/practicaldev/image/fetch/s--Z7BxBMz1--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_66%2Cw_880/https://dev-to-uploads.s3.amazonaws.com/uploads/articles/j2xzw2g664tj31jij13t.gif)

One of my favorite parts of doing this show is meeting people across the world who want to help others have and safe and secure experience on Azure.  I've done my best to find guests in the last few weeks that really drill down the importance of "shifting left" while developing software.  This is an effort that should start at your planning process and involve everyone from your developers, product managers, and ops.

This week is no different as we talk about securing open source management workflows.  As developers progress along the software delivery lifecycle there's a need to ensure that security scans can be automated.  By implementing products like [WhiteSource](https://www.whitesourcesoftware.com/) you can automatically detect, prioritize, and remediate your open source security vulnerabilities.  

On this episode of AzureFunBytes, [Rhys Arkins](https://twitter.com/rarkins) and [Lena Kleyner](https://www.linkedin.com/in/lena-kleyner-1a74935) of [WhiteSource Software](https://www.whitesourcesoftware.com/) are here to introduce us to WhiteSource's security and licensing capabilities for Azure DevOps! 

{% youtube qhKWAeenqXQ %}

[00:00:00 - Opening](https://youtu.be/qhKWAeenqXQ)
[00:06:29 - Let's meet Lena and Rhys](https://youtu.be/qhKWAeenqXQ?t=389)
[00:18:30 - Detection, Prioritization, Remediation](https://youtu.be/qhKWAeenqXQ?t=1110)
[00:26:45 - Open source Security](https://youtu.be/qhKWAeenqXQ?t=1605)
[00:34:42 - Demoing WhiteSource and Azure DevOps](https://youtu.be/qhKWAeenqXQ?t=2082)
[00:42:12 - Open source risk report](https://youtu.be/qhKWAeenqXQ?t=2532)
[00:50:20 - Free plugin](https://youtu.be/qhKWAeenqXQ?t=3020)
[00:53:03 - Diffend](https://youtu.be/qhKWAeenqXQ?t=3183)



Our agenda includes:

* Rhys & Lena's roles at WhiteSource
* Software Composition Analysis (SCA) importance
* SCA in the SDLC, including AZDO
* Pipeline plugin for scanning
* UI for security and compliance reports
* Renovate tool for Dependency automation
* Diffend service for Supply Chain security
* Future Azure repos integrations

**About Rhys Arkins:**

*Rhys Arkins is the Director of Product Management at WhiteSource responsible for developer tooling and supply chain security. He joined WhiteSource in 2019 through the acquisition of his startup "Renovate Bot", which he continues to take a leading role on. Rhys is a big believer in automation in the SDLC as a way to produce better, quicker, more consistent outcomes.*

**About Lena Kleyner:**

*Lena Kleyner is a Product Manager at WhiteSource with a vast technical background. With more than 10 years as a software developer, she is leading WhiteSource's integrations and scanning agents. Lena specifically enjoys connecting between customers' needs and the proper technical solutions.*

------

Learn about Azure fundamentals with me!

Live stream is normally found on Twitch, YouTube, and [LearnTV](https://cda.ms/226) at 11 AM PT / 2 PM ET Thursday. You can also find the recordings here as well:

[AzureFunBytes on Twitch](https://twitch.tv/azurefunbytes)
[AzureFunBytes on YouTube](https://aka.ms/jaygordononyoutube)
[Azure DevOps YouTube Channel](https://www.youtube.com/channel/UC-ikyViYMM69joIAv7dlMsA)
[Follow AzureFunBytes on Twitter](https://twitter.com/azurefunbytes)

Useful Docs:

[Get $200 in free Azure Credit](https://cda.ms/219)
[Microsoft Learn: Introduction to Azure fundamentals](https://cda.ms/243)
[WhiteSource Software](https://www.whitesourcesoftware.com/)
[WhiteSource for Azure DevOps Services](https://cda.ms/2Ld)
[WhiteSource Bolt](https://cda.ms/2Lf)
[Renovate Bot open source](https://github.com/renovatebot/renovate)
[Renovate Me community pipeline](https://cda.ms/2Lg)
[WhiteSource Diffend](https://www.whitesourcesoftware.com/whitesource-diffend/)
[WhiteSource Essentials](https://cda.ms/2Lk)
[WhiteSource streamlines application delivery and development with Microsoft Azure and Azure Kubernetes Service](https://cda.ms/2Lm)
[Microsoft Security Engineer certification path](https://cda.ms/2Ln)
[Enable DevSecOps with Azure and GitHub](https://cda.ms/2Lp)