WhiteSource rollout Pilot about open-developer-platform

[mcleo-d]

Hey @maoo - Are there representatives from each of the following teams who can integrate WhiteSource from the FINOS Project Blueprint whilst you oversee activity?

• plexus-interop
• finos-plexus.github.io
• perspective
• cloud-service-certification
• kdb
• greenkey-discovery-sdk
• greenkey-asrtoolkit

Feel free to tag the relevant team leads to involve them in the conversation.

[maoo]

Hi @mcleo-d - the WhiteSource bot provides an automatic PR when enabled; I'd follow WhiteSource suggestion and start with that, then wait for the teams to go through the issues being spotted and update the configuration accordingly, following our guidance/support.

We used this approach on https://github.com/finos/datahelix and I think it worked quite well.

One key element IMO is to reach out to the teams in advance and notify them that we are going to enable the WhiteSource scanning - which by default will open issues on GitHub - unless they prefer a different way of proceeding.

WDYT?

[mcleo-d]

The WhiteSource bot provides an automatic PR when enabled; I'd follow WhiteSource suggestion and start with that, then wait for the teams to go through the issues being spotted and update the configuration accordingly, following our guidance/support.

Sounds like a relatively straight forward PR, which in my opinion is awesome! 👍

One key element IMO is to reach out to the teams in advance and notify them that we are going to enable the WhiteSource scanning - which by default will open issues on GitHub - unless they prefer a different way of proceeding.

Informing teams in advance is very wise, as experience shows, many relevant and irrelevant issues can appear on project issue boards. It's good to bring the teams along with us, even with a quick notification.

[maoo]

Removing the following from description:

• finos-plexus.github.io
• perspective
• cloud-service-certification
• kdb
• greenkey-discovery-sdk
• greenkey-asrtoolkit
• Create blogpost about WhiteSource rollout

[mcleo-d]

Have moved Create blogpost about WhiteSource rollout to #82

[mcleo-d]

The following epic has been created for Hadouken related projects - #83