@MISC {dockerscan,
    title        = "Docker Security Scanning",
    howpublished = "\url{https://docs.docker.com/docker-cloud/builds/image-scan}",
    note         = "retrieved 2.5.2017"
}

@MISC {dockerscan,
    title        = "Docker Security Scanning",
    howpublished = "\url{https://docs.docker.com/docker-cloud/builds/image-scan}",
    note         = "retrieved 2.5.2017"
}
@MISC {blackduckhub,
    title        = "Black Duck Hub",
    howpublished = "\url{https://www.blackducksoftware.com/products/hub}",
    note         = "retrieved 6.5.2017"
}
@MISC {veracodesca,
    title        = "Veracode Software Composition Analysis",
    howpublished = "\url{https://www.veracode.com/products/software-composition-analysis}",
    note         = "retrieved 6.5.2017"
}
@MISC {whitehatsentinel,
    title        = "White Hat Sentinel Source Software Composition Analysis",
    howpublished = "\url{https://www.whitehatsec.com/wp-content/uploads/2016/01/Sentinel_Source_Software_Composition_Analysis_Feature_Brief.pdf}",
    note         = "retrieved 6.5.2017"
}
@MISC {whitesourceosi,
    title        = "WhiteSource Open Source Inventory",
    howpublished = "\url{https://www.whitesourcesoftware.com/open-source-inventory/}",
    note         = "retrieved 6.5.2017"
}
@MISC {synopsysprotecode,
    title        = "Software Composition Analysis: Manage risk in complex supply chains",
    howpublished = "\url{https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html}",
    note         = "retrieved 6.5.2017"
}

Add commercial SCA tool references
Add commercial SCA tool references
