White source bolt extension change (microsoft#638)

* replaced white source bolt with mend bolt

* replaced white source bolt with mend bolt

Co-authored-by: Sriramdas Balaji <[email protected]>

labs/vstsextend/whitesource/readme.md

@@ -1,5 +1,5 @@
 ---
-title: Managing Open-source security and license with WhiteSource
+title: Managing Open-source security and license with Mend (formerly WhiteSource)
 layout: page
 sidebar: vsts2
 permalink: /labs/vstsextend/whitesource/
@@ -9,15 +9,15 @@ folder: /labs/vstsextend/whitesource/
 
 ## Overview
 
-[WhiteSource](https://www.whitesourcesoftware.com/){:target="_blank"} is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.
+[Mend (formerly WhiteSource)](https://www.mend.io/){:target="_blank"} is the leader in continuous open source software security and compliance management. Mend integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.
 
-WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server. It works per project and does not offer real-time alert capabilities like the **Full platform**  which is generally recommended for larger development teams, wanting to automate their open source management throughout the entire software development lifecycle (from the repositories to post-deployment stages) and across all projects and products.
+Mend provides Mend Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server. It works per project and does not offer real-time alert capabilities like the **Full platform**  which is generally recommended for larger development teams, wanting to automate their open source management throughout the entire software development lifecycle (from the repositories to post-deployment stages) and across all projects and products.
 
 ### What's covered in this lab
 
-This lab shows how you can use **WhiteSource Bolt with Azure DevOps** to automatically detect alerts on vulnerable open source components, outdated libraries, and license compliance issues in your code. You will be using WebGoat, a deliberately insecure web application, maintained by OWASP designed to teach web application security lessons.
+This lab shows how you can use **Mend Bolt with Azure DevOps** to automatically detect alerts on vulnerable open source components, outdated libraries, and license compliance issues in your code. You will be using WebGoat, a deliberately insecure web application, maintained by OWASP designed to teach web application security lessons.
 
-Azure DevOps integration with WhiteSource Bolt will enable you to:
+Azure DevOps integration with Mend Bolt will enable you to:
 
 1. Detect and remedy vulnerable open source components.
 1. Generate comprehensive open source inventory reports per project or build.
@@ -30,20 +30,23 @@ Azure DevOps integration with WhiteSource Bolt will enable you to:
 
 1. Use [Azure DevOps Demo Generator](https://azuredevopsdemogenerator.azurewebsites.net/?name=WhiteSource-Bolt&templateid=77362){:target="_blank"} to provision the WhiteSource project on your Azure DevOps Organization.
 
-## Exercise 1: Activate WhiteSource Bolt
+## Exercise 1: Activate Mend Bolt
 
-In your Azure DevOps Project, under **Pipelines** section, go to **White Source Bolt** tab, provide your **Work Email**, **Company Name** and click *Get Started* button to start using the *Free* version.
+### Prerequisites to integrate Azure DevOps with Mend
+Ensure the following:
 
-![Dev_Essentials](images/activate.png)
+1. Your Azure DevOps organization is connected to an Azure AD via **Organization Settings > Azure Active Directory**.
+
+      ![ADO-ADConnect](images/ADO-ADConnect.png)
+1. In your Azure DevOps navigate to **Organization Settings** and select **Mend** under Extensions. Provide your Work Email, Company Name and other details and click **Create Account** button to start using the Free version.
 
-Upon activation, the below message is displayed.
 
-![14daystrial](images/14daystrial.png)
+   ![Mendboltactivation](images/Mendboltactivation.png)
 
 
 ## Exercise 2: Trigger a build
 
-You have a **Java code** provisioned by the Azure DevOps demo generator. You will use **WhiteSource Bolt** extension to check the vulnerable components present in this code.
+You have a **Java code** provisioned by the Azure DevOps demo generator. You will use **Mend Bolt** extension to check the vulnerable components present in this code.
 
 1. Go to **Pipelines** section under **Pipelines** tab, select the build definition **WhiteSourceBolt** and click on **Run pipeline** to trigger a build. Click **Run** (leave defaults).
 
@@ -64,7 +67,7 @@ You have a **Java code** provisioned by the Azure DevOps demo generator. You wil
     |----|------|
     |![npm](images/npm.png) **npm**| Installs and publishes npm packages required for the build|
     |![maven](images/maven.png) **Maven**| builds Java code with the provided pom xml file|
-    |![whitesourcebolt](images/whitesourcebolt.png) **WhiteSource Bolt**| scans the code in the provided working directory/root directory to detect security vulnerabilities, problematic open source licenses|
+    |![whitesourcebolt](images/mend2.png)**Mend Bolt**| scans the code in the provided working directory/root directory to detect security vulnerabilities, problematic open source licenses|
     |![copy-files](images/copy-files.png) **Copy Files**| copies the resulting JAR files from the source to the destination folder using match patterns|
     |![publish-build-artifacts](images/publish-build-artifacts.png) **Publish Build Artifacts**| publishes the artifacts produced by the build
 
@@ -73,30 +76,29 @@ You have a **Java code** provisioned by the Azure DevOps demo generator. You wil
    ![go back](images/back.png)
    ![build_summary](images/build_summarynew.png)
 
-1. Navigate to **WhiteSource Bolt Build Report** tab  and wait for the report generation of the completed build to see the vulnerability report.
+1. Navigate to **Mend Bolt** tab  and wait for the report generation of the completed build to see the vulnerability report.
 
-   ![](images/selectwhitesourcetab.png)
-   ![report](images/WhiteSourceBolt13.png)
+
+   ![report](images/mendboltreport.png)
 
 ## Exercise 3: Analyze Reports
 
-WhiteSource bolt automatically detects OpenSource components in the software including transitive dependencies and their respective licenses.
+Mend bolt automatically detects OpenSource components in the software including transitive dependencies and their respective licenses.
 
 ### Security Dashboard
 
 The security dashboard shows the vulnerability of the build.
 This report shows the list of all vulnerable open source components with **Vulnerability Score, Vulnerable Libraries, Severity Distribution**.
 
-![Security](images/WhiteSourceBolt30.png)
+![Security](images/mendsecuritytab.png)
 
+### License risks
 You can see the opensource license distribution and a detailed view of all components and links to their metadata and licensed references.
 
-### Outdated Libraries
+ ![LicenceRisks](images/mendlicencerisks.png)
 
-WhiteSource Bolt also tracks outdated libraries in the project, getting all the detailed information and links to newer versions and recommendations.
 
-![outdatedlibraries](images/outdatedlibraries.png)
 
 ## Summary
 
-With Azure DevOps and WhiteSource Bolt integration, you can *shift-left* your open source management. The integration allows you to have alerts in real time, on vulnerabilities and other issues to help you take immediate action.
+With Azure DevOps and Mend Bolt integration, you can *shift-left* your open source management. The integration allows you to have alerts in real time, on vulnerabilities and other issues to help you take immediate action.

readme.md

@@ -530,7 +530,7 @@ description: Learn how you can implement modern DevOps practices with Azure, Azu
                                                          <li class="osslist"> <img src="/images/azuredevopsproject.png" height="42"
                                                         class="icon-bor-p-m" /><a href="/labs/vstsextend/azuredevopsprojectdotnet/"
                                                         class="fon-size-13"> Create a CI/CD pipeline for .NET with the Azure DevOps Project</a></li>
-                                                 <li class="osslist"> <img src="/images/whitesource-42.png" height="42"
+                                                 <li class="osslist"> <img src="/images/mend2.png" height="42"
                                                         class="icon-bor-p-m" /><a href="/labs/vstsextend/whitesource/"
                                                         class="fon-size-13"> Managing Open-source security and license with WhiteSource</a></li>
                                                 <li class="osslist"> <img src="/images/selenium-42.png" height="42"