Synopsys Code Sight for Eclipse
The Synopsys® Code Sight™ plug-in helps you find and fix security and quality issues in your software while you code. It can quickly identify vulnerabilities in both source code and open source dependencies, and help you fix them right in the IDE.
Code Sight can scan large projects and development artifacts in seconds, including:
- web and mobile application files,
- microservices and
- Infrastructure-as-Code *(IaC) configurations.
Code Sight will alert you to any detected issues, including:
- code security risks,
- API safety standards,
- cryptography issues,
- hard-coded secrets, and
- vulnerabilities in your open source dependencies (e.g. Log4j CVE-2021-44228).
Once the issues have been identified, Code Sight provides detailed remediation guidance and access to training directly in the IDE help you quickly fix issues today and write better code going forward.
Code Sight Standard Edition Free Trial
Sign up for a free trial of Code Sight and get started in only a couple of minutes
Code Sight Standard Edition uses integrated analysis of your code and open source dependencies to provide IDE-based security analysis without requiring installation of a centralized SAST or SCA solution. Sign-up for the trial directly within the plug-in and start scanning code in less than five minutes. Contact us if you have any license or product questions.
Code Sight Standard Edition is very easy to use, and if you’d like some recommendations on how to get the most out of it, check out these resources:
Code Sight Plug-In for Black Duck and Coverity
Extend the capabilities of your Synopsys tools to the developer desktop
Existing Synopsys customers can connect Code Sight with their Coverity SAST or Black Duck SCA deployments to give developers direct access to these tools’ deeper analysis and enhanced capabilities, with the flexibility to use the built-in Rapid Scan capabilities included in Code Sight Standard Edition. After you install the Code Sight plug-in, simply click the “Enable Coverity” or “Enable Black Duck” buttons to connect Code Sight to these tools.
For more information, refer to the quick start guides below:
Additional information can be found here:
License Terms
By downloading this plug-in, you are agreeing to the Synopsys End User License Agreement. Users with active commercial licenses for Coverity SAST or Black Duck SCA can also use Code Sight free of charge.
Resources
Reviews Sign in to post reviews
What is the latest version?
Submitted by Josh Lee on Wed, 2022-06-08 12:42
What is the latest version of this plugin?
This plugin sucks!
Submitted by Peter McDilly on Sat, 2020-09-05 17:22
I can't get anything done. Everytime I change a piece of code a riot of processes (controller.exe, cov-analyze, cov-run-desktop, etc.) run wild and bring my system to a grinding halt. Had to remove it.
"The following solutions are not compatible with this version...
Submitted by John Tangney on Sun, 2019-10-06 14:14
No further info is available in the error alert.
Version: 2019-09 R (4.13.0)
Build id: 20190917-1200