Skip to content

Commit a676ca7

Browse files
author
Tomas Gonzalez
committed
Updating README and Overview
1 parent bc6a95c commit a676ca7

File tree

2 files changed

+28
-8
lines changed

2 files changed

+28
-8
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,9 @@ This is the GitHub page for the Detect plugin for TFS and Azure DevOps.
88

99

1010
## Where can I get the latest release? ##
11-
The Detect for TFS/Azure DevOps is available on the [Azure Marketplace](https://marketplace.visualstudio.com/items?itemName=black-duck-software.detect-for-tfs)
11+
The Detect for TFS/Azure DevOps is available on the [Azure Marketplace](https://marketplace.visualstudio.com/items?itemName=black-duck-software.detect-for-tfs).
1212

13-
Releases and Source are available under [GitHub releases](https://github.com/blackducksoftware/detect-for-tfs/releases)
13+
Releases and Source are available under [GitHub releases](https://github.com/blackducksoftware/detect-for-tfs/releases).
1414

1515
## Documentation ##
16-
Instructions and examples for the TFS/Azure DevOps Extension are available on our [Public Confluence](https://synopsys.atlassian.net/wiki/spaces/INTDOCS/pages/622655/Running+Hub+Detect+with+TFS+or+Azure+DevOps)
16+
Instructions and examples for the TFS/Azure DevOps Extension are available on our [Public Confluence](https://synopsys.atlassian.net/wiki/spaces/INTDOCS/pages/622655/Running+Hub+Detect+with+TFS+or+Azure+DevOps).

overview.md

Lines changed: 25 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,41 @@
1-
## Overview
1+
## Overview ##
22

3-
The Black Duck plugin for TFS and Azure DevOps allows you to automatically find and fix open source security vulnerabilities during your application build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck policy violations are met.
3+
The Black Duck plugin for TFS and Azure DevOps allows automatic detection of open source security vulnerabilities during your application build process. The integration allows you to enforce policies configured in Black Duck to receive alerts and fail builds when policy violations are met.
44

5-
## Documentation
5+
## What is Black Duck? ##
6+
7+
[Black Duck by Synopsys](https://www.blackducksoftware.com/) helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios. Black Duck is powered by the world’s largest open source KnowledgeBase™, with information on 2 million open source projects and 79,000+ known security vulnerabilities. The KnowledgeBase™, combined with the broadest support for platforms, languages and integrations, is why 2,000 organizations worldwide rely on Black Duck to secure and manage open source.
8+
9+
## Key Features ##
10+
11+
• Open Source Discovery: Rapid scanning and identification of open source libraries, versions, license, and community activity powered by the Black Duck® KnowledgeBase™ – the industry’s most complete with detailed data on more than 2 million open source projects and 79,000+ known open source vulnerabilities.
12+
13+
• Identify Open Source Risk: Create an inventory of all open source components in use and map them to known security vulnerabilities, giving you insight to the severity of the vulnerability and possible remediation steps.
14+
15+
• Risk Remediation and Policy Enforcement: Make data-driven decisions around vulnerability remediation prioritization. Leverage mitigation guidance and policy management to secure your code and manage your external and internal compliance mandates.
16+
17+
• Continuous Monitoring for New Security Vulnerabilities: Continously monitor and alert on newly reported open source security vulnerabilities, without having to re-scan your code.
18+
19+
## The Extension ##
20+
21+
Black Duck for TFS and Azure DevOps is architected to integrate seamlessly with TFS and Azure DevOps build and release pipelines.
22+
23+
Using other tools in your CI/CD pipeline such as Jenkins, Artifactory, and others? We have easy to use plugins for the most popular development tools, and REST APIs that allow you to build your own integrations for virtually any commercial or custom development environment. Check out our [Integrations page](https://synopsys.atlassian.net/wiki/spaces/INTDOCS/overview) for more information!
24+
25+
## Documentation ##
626

727
Instructions and examples for the TFS/Azure DevOps Extension are available on our [Public Confluence](https://synopsys.atlassian.net/wiki/spaces/INTDOCS/pages/622655/Running+Hub+Detect+with+TFS+or+Azure+DevOps)
828

929
For information on the full capabilities of Detect visit [Black Duck Detect Docs](https://synopsys.atlassian.net/wiki/spaces/INTDOCS/pages/622633/Hub+Detect)
1030

11-
## Pre-Requisites
31+
## Pre-Requisites ##
1232

1333
Before calling Detect in TFS/Azure DevOps, an active instance of Black Duck is required.
1434

1535
If you do not have Black Duck, refer to [Black Duck on the Azure Marketplace](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/black-duck-software.blackduck_hub_431) for more information.
1636

1737
Follow the steps to [Deploy Black Duck on Azure](https://synopsys.atlassian.net/wiki/spaces/PARTNERS/pages/7471182/Installing+Black+Duck+in+Azure+Using+the+Azure+Marketplace) for more information on deploying from the Azure Marketplace.
1838

19-
## Want to contribute?
39+
## Want to contribute? ##
2040

2141
Running into an issue? Want to contribute? All code for this extension is [available on Github](https://github.com/blackducksoftware/detect-for-tfs).

0 commit comments

Comments
 (0)