Black Duck Integrates with Atlassian
May 10, 2017

Black Duck announced a collaboration with Atlassian to manage open source security, compliance, and quality risks, while ensuring DevOps teams maintain speed and agility.

The goal is to provide development teams with solution integrations that enhance their ability to maintain velocity and security as they build software using open source components.

“Modern applications are built with open source,” said Jukka Alanen, VP of Business Development and Corporate Strategy. “Black Duck is working with Atlassian to enable software teams to manage and secure their use of open source as part of their existing DevOps and agile processes.”

Black Duck has released two Atlassian integrations to automate the management and security of open source and both are available through the Atlassian Marketplace.

Black Duck’s Atlassian JIRA Software integration allows teams to trigger and manage developer workflows based on open source use and security policies defined in Black Duck Hub. The integration also alerts JIRA Software users when new open source vulnerabilities are identified by Hub. Black Duck’s Atlassian Bamboo CI integration enables teams to automate discovery of open source in their code via Bamboo build processes, helping teams efficiently track and automate open source use as part of their continuous delivery pipeline. This will also help enforce policies to prevent release of applications with unsafe or non-compliant open source.

“Software teams nowadays rely heavily on open source components,” said Bryant Lee, Head of Partnerships and Integration, Atlassian. “The Black Duck Hub add-ons for Bamboo and JIRA provide visibility and control for software teams to use open source with trust and confidence.”

The Atlassian collaboration follows Black Duck’s recent announcement that it is integrating Hub with Microsoft Visual Studio Team Services (TS) and Team Foundation Server (TFS). Both integrations are part of a broader Black Duck commitment to simplify and integrate open source management with the tools and platforms that development and DevOps teams use to automate software development and delivery.

Share this

Industry News

April 16, 2024

Kong announced the commercial availability of Kong Konnect Dedicated Cloud Gateways on Amazon Web Services (AWS).

April 16, 2024

Pegasystems announced the general availability of Pega Infinity ’24.1™.

April 16, 2024

Sylabs announces the launch of a new certification focusing on the Singularity container platform.

April 15, 2024

OpenText™ announced Cloud Editions (CE) 24.2, including OpenText DevOps Cloud and OpenText™ DevOps Aviator.

April 15, 2024

Postman announced its acquisition of Orbit, the community growth platform for developer companies.

April 11, 2024

Check Point® Software Technologies Ltd. announced new email security features that enhance its Check Point Harmony Email & Collaboration portfolio: Patented unified quarantine, DMARC monitoring, archiving, and Smart Banners.

April 11, 2024

Automation Anywhere announced an expanded partnership with Google Cloud to leverage the combined power of generative AI and its own specialized, generative AI automation models to give companies a powerful solution to optimize and transform their business.

April 11, 2024

Jetic announced the release of Jetlets, a low-code and no-code block template, that allows users to easily build any technically advanced integration use case, typically not covered by alternative integration platforms.

April 10, 2024

Progress announced new powerful capabilities and enhancements in the latest release of Progress® Sitefinity®.

April 10, 2024

Buildkite signed a multi-year strategic collaboration agreement (SCA) with Amazon Web Services (AWS), the world's most comprehensive and broadly adopted cloud, to accelerate delivery of cloud-native applications across multiple industries, including digital native, financial services, retail or any enterprise undergoing digital transformation.

April 10, 2024

AppViewX announced new functionality in the AppViewX CERT+ certificate lifecycle management automation product that helps organizations prepare for Google’s proposed 90-day TLS certificate validity policy.

April 09, 2024

Rocket Software is addressing the growing demand for integrated security, compliance, and automation in software development with its latest release of Rocket® DevOps, formerly known as Aldon®.

April 09, 2024

Wind River announced the latest release of Wind River Studio Developer, an edge-to-cloud DevSecOps platform that accelerates development, deployment, and operation of mission-critical systems.

April 09, 2024

appCD announced its generative infrastructure from code solution now supports Azure Kubernetes Service (AKS).

April 09, 2024

Synopsys announced the availability of Black Duck® Supply Chain Edition, a new software composition analysis (SCA) offering that enables organizations to mitigate upstream risk in their software supply chains.