Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

Note

IMPORTANT: The Team City TeamCity plugin will reach its End Of Life starting November 1, 2021.

After this date, WhiteSource Mend will no longer provide standard support, including updates and fixes, for the deprecated plugin. Extended Support, which is limited to configuration and Support troubleshooting, will continue until May 1, 2022. Following this date, the NuGet TeamCity plugin will no longer be supported by WhiteSourceMend. Please make sure to migrate to the Unified Agent before the end of standard support on November 1, 2021 to maintain full support of your product.

...

Once set up, all usage of open-source software in the organization will be continuously and automatically in sync with WhiteSourceMend.

  • New projects will be created

  • Existing projects will be updated

  • Policies will be enforced on every action, failing the build if necessary.

...

On execution, the plugin will determine which open source is currently used by your project and send it to WhiteSourceMend.

Note

No source code is scanned. Only descriptive information is sent over the wire.

Normal Flow

WhiteSource Mend uses the collected information to create new projects or update existing ones.

...

Installing the Plugin

Download the plugin:

Installation of the plugin is done directly via the TeamCity GUI:

...

Start by configuring the global settings, these settings will be applied to every project in your TeamCity environment. Then, setup the jobs that should interact with WhiteSourceMend.

Global Settings

Once the plugin is installed go to Administration >  Integrations > WhiteSourceMend.

...

  • Organization Token: A unique identifier of the organization. You can retrieve it in the Admin Integration API page.

  • User Key: Unique user key. See User Level Access Control in Integrations and APIs for more information. 

  • Policy Check: Checks that the introduced open source libraries conform with organization policies.

    • Check only new libraries: Check that the newly introduced open source libraries conform with organization policies.

    • Force check all libraries: Check that all introduced open source libraries conform with organization policies. 

    • Disable: Disable policies check when updating WhiteSourceMend.

  • Force Update: Updates organization inventory regardless of policy violations.

  • Fail on Error: Indicates whether or not to fail the build on a general error (e.g. network error).

  • Service URL: URL of the environment on which the WhiteSource Mend organization is hosted. The default ishttps://saas.whitesourcesoftwareMendsoftware.com”; therefore organizations hosted on that can leave this field blank.

  • Connection Timeout (optional): Connection timeout value in minutes. If the field is left blank, the value is 60 minutes.

  • Proxy Server (optional)If TeamCity is behind a firewall then you should select the checkbox. As displayed in the following screenshot, once the checkbox is selected, newly displayed fields can be filled in, in order to allow communication with the WhiteSource Mend servers. 

    Image Removed


    Image Added

Environment Variable - Skip plugin

By setting SKIP_WHITESOURCEMend_PLUGIN to true the plugin will be disabled.

...

Number of connection retries when unable to connect to WhiteSource Mend service (default value is 1).

...

Connection interval in seconds between two connection retries to WhiteSource Mend service (default value is 3 seconds).

...

Enable the plugin for each job you want to use to update WhiteSourceMend.

Info

Only supported runner types will have these options visible.

...

The plugin is executed when the runner finishes. Sample log section:

...

Change Log

Version

Description

Version 21.6.2

  • Dependency upgrde

Version 21.4.1

  • Upgrade com.thoughtworks.xstream and com.fasterxml.jackson.core dependencies version

Version 21.1.1

  • Upgrade com.thoughtworks.xstream dependency  version to 1.4.15

Version 20.11.2

  • Upgrade com.thoughtworks.xstream dependency  version to 1.4.14 

Version 20.10.2

  • Upgrade junit dependency  version to 4.13.1 

Version 20.7.1

  • Upgraded the XStream Core dependency to version 1.4.12

Version 20.6.2

  • Bug fix - check policies

Version 19.11.2

Version 19.9.2.2

  • Minor Fixes

Version 19.5.3

  • Minor Fixes

Version 19.1.2

  • Update agent api version

Version 18.10.1

  • Service URL supports both with and without "/agent" (https://saas.

whitesourcesoftware
whitesourcesoftware

Version 18.6.2

  • Resume build upon failed communication to server.

Version 18.5.1

  • Added support for user-level access control in integrations.

Version 17.11.4

  • Improve hash processing.

  • Add parameter to enable/disable

whitesource
  • Mend plugin (SKIP_

WHITESOURCE
  • Mend_PLUGIN = true ).

  • Bug Fix - Fail or error : Build did not pass despite the flag set to false.

Version 1.1.7

  • Add 'fail on error' functionality - fails the build even in case of inventory force update, or other general errors.

Version 1.1.6

  • Add force update functionality.

Version 1.1.5

  • Add support for force check all dependencies (old and new) according to the organization policies

  • Bug Fix - use global settings in maven runner.

Version 1.1.4

  • Add connection timeout parameter. Connection timeout is measured in minutes. Default value is 60 minutes.

Version 1.1.3

  • Automatic proxy detection + minor bug fixes.

Version 1.1.2

  • Product identification in agent api

  • Improved proxy configuration

  • Option to change service url

Version 1.1.1

Minor changes:

  • Communication with

WhiteSource
  • Mend servers is now encrypted using SSL by default.

  • Several bug fixes in policy check report

  • Code refactor

Version 1.1.0

First release of the plugin.