This documentation describes the Synopsys Black Duck Service Broker for VMware Tanzu. The Synopsys Black Duck Service Broker for VMware Tanzu enables developers to secure and manage open source software in VMware Tanzu apps through the Black Duck console.
Black Duck is the industry leader in open source security and management. The Synopsys Black Duck Service Broker for VMware Tanzu exposes its scan service on the Marketplace. Developers can then use Apps Manager or the Cloud Foundry command line interface (cf CLI) to bind the Black Duck scan service to their apps.
Creating a Black Duck service instance and binding it to an app enables developers to initiate an open source software scan during the cf-push process.
Using the Synopsys Black Duck Service Broker, you can:
The following table provides version and version support information about the Synopsys Black Duck Service Broker for VMware Tanzu.
Element | Details |
---|---|
Version | v2.0.0 |
Release date | March 7, 2019 |
Software component version | Black Duck v5.0 and later |
Compatible Ops Manager versions | v2.2.x, v2.3.x, and v2.4.x |
Compatible VMware Tanzu Application Service for VMs version(s) | v2.2.x, v2.3.x, and v2.4.x |
BOSH stemcell version | Ubuntu Xenial |
For issues, feature requests, questions, or additional information, contact the VMware Tanzu Feedback list, or contact Synopsys Support.
The Synopsys Black Duck Service Broker for VMware Tanzu source code is open source and is located at the Black Duck Software GitHub hub-cf repository.
The Synopsys Black Duck Service Broker for VMware Tanzu code is licensed under Apache 2.0.