Code Sight (Security)

The Synopsys Software Integrity Group is now Black Duck. If you are an existing Code Sight user, please follow these instructions to manually re-install Code Sight in order to receive future updates. If you are a new user, you may proceed with installing Black Duck Code Sight.

The Black Duck® Code Sight™ plug-in helps you find and fix security and quality issues in your software while you code. It can quickly identify vulnerabilities in both source code and open source dependencies, and help you fix them right in the IDE.

Code Sight can scan large projects and development artifacts in seconds, including:

• web and mobile application files,
• microservices and
• Infrastructure-as-Code *(IaC) configurations.

Code Sight will alert you to any detected issues, including:

• code security risks,
• API safety standards,
• cryptography issues,
• hard-coded secrets, and
• vulnerabilities in your open source dependencies (e.g. Log4j CVE-2021-44228).

Once the issues have been identified, Code Sight provides detailed remediation guidance and access to training directly in the IDE help you quickly fix issues today and write better code going forward.

Code Sight Standard Edition Free Trial

Sign up for a free trial of Code Sight and get started in only a couple of minutes

Code Sight Standard Edition uses integrated analysis of your code and open source dependencies to provide IDE-based security analysis without requiring installation of a centralized SAST or SCA solution. Sign-up for the trial directly within the plug-in and start scanning code in less than five minutes. Contact us if you have any license or product questions.

Code Sight Standard Edition is very easy to use, and if you’d like some recommendations on how to get the most out of it, check out these resources:

Code Sight Standard Edition Interactive Tour

Code Sight Standard Edition Getting Started Guide

Code Sight Plug-In for Black Duck SCA and Coverity

Extend the capabilities of your Black Duck tools to the developer desktop

Existing Black Duck customers can connect Code Sight with their Coverity or Black Duck SCA deployments to give developers direct access to these tools’ deeper analysis and enhanced capabilities, with the flexibility to use the built-in Rapid Scan capabilities included in Code Sight Standard Edition. After you install the Code Sight plug-in, simply click the “Enable Coverity” or “Enable Black Duck SCA” buttons to connect Code Sight to these tools.

For more information, refer to the quick start guides below:

• Code Sight for Black Duck SCA Quick Start
• Code Sight for Coverity Quick Start

Additional information can be found here:

• Documentation
• Interactive Tours

License Terms

By downloading this plug-in, you are agreeing to the Black Duck End User License Agreement. Users with active commercial licenses for Coverity or Black Duck SCA can also use Code Sight free of charge.

Resources

Support Portal

Black Duck Website

Request SBOM

Contact Us