Codeant

The ValiantSec® CodeAnt™ plug-in helps you find and fix security and quality issues in your software while you code.It can quickly identify vulnerabilities in both source code and open source dependencies, and help you fix them right in the IDE.

CodeAnt can scan large projects and development artifacts in seconds, including:
1. Software Dependency Component Analysis;
2. Source Code Homology Analysis;
3. Binary component analysis;
4. Infrastructure-as-Code*(lac) Configurations.

CodeAnt will detect all open source issues within the component, help users clarify dependency relationships, and maintain software supply chain security, including：
1. Code Security Risks;
2. Dependency tree;
3. Open Source Software License Issues;
4. Vulnerabilities In Your Open Source Dependencies(e.g. Log4j CVE-2021-44228).

Once the issues have been identified, CodeAnt provides detailed remediation guidance and access to training directly in the IDE help you quickly fix issues today and write better code going forward.

Minimum version: 2020.3

CodeAnt standard Edition Free Trial

Sign up for a free trial of CodeAnt and get started in only a couple of minutes.(www.codeant.cn)

CodeAnt Standard Edition uses integrated analysis of your code and open source dependencies to provide IDE-based security analysis without requiring installation of a centralized SAST or SCA solution. Sign-up for the trial directly within the plug-in and start scanning code in less than five minutes. Contact us if you have any license or product questions.

Usage: after installed this plugin, right click on a project in project expoloer, then select the munu codeant to use code analysis service.