Which tool should you add to the build pipeline to automatically detect when commonly used open-source libraries are introduced to the codebase for licensing compliance?

Black Duck by Synopsys is a Software Composition Analysis (SCA) tool specifically designed to identify open-source components within a codebase, manage their licenses, and detect security vulnerabilities. Integrating Black Duck into a build pipeline automates the scanning process, ensuring compliance with licensing policies and identifying potential risks early in the development lifecycle. Microsoft Visual SourceSafe is an outdated version control system, not an SCA tool. Code Style refers to coding conventions and formatting, unrelated to open-source license compliance. Jenkins is an automation server used for continuous integration and continuous delivery (CI/CD), but it does not inherently provide SCA capabilities; it would orchestrate a tool like Black Duck.