Synopsys Launches Standard Edition of Code Sight Plug-in

     Synopsys announced the general availability of Code Sight Standard Edition, a standalone version of the Code Sight plug-in for integrated development environments (IDEs) that enables developers to quickly find and fix source code, open source dependencies before committing code Security flaws in files such as projects, infrastructure as code, etc. With Synopsys' Rapid Scan feature, Code Sight Standard Edition provides fast, lightweight application security analysis in the developer's IDE, preventing issues from being discovered late in the software development life cycle (SDLC), resulting in costly rework. Currently, Rapid Scan has been added to Coverity Static Application Security Testing (SAST) and Black Duck Software Component Analysis (SCA).

     With Code Sight Standard Edition, developers can fix security flaws as they code, reducing the load on downstream security testing and avoiding previous code flaws and vulnerabilities that are discovered when developers are already performing other tasks, minimizing the risk of Expensive rework. Code Sight Standard Edition, currently available for the Visual Studio Code IDE, operates independently of centralized security testing tools such as Coverity SAST and Black Duck SCA. Coverity and Black Duck are usually used later in the SDLC. Developers can download and install Code Sight directly from the VS Code Marketplace and start analyzing code within five minutes.

     "In modern software development, 'speed is king' and software risk equals business risk," said Jason Schmitt, general manager of Synopsys' software quality and security group. Business security. They are pressed for time, scanning and testing non-stop. Technology empowering staff to help them write more secure code from the start can significantly reduce the time it takes to fix open source and code security flaws late in the SDLC. However, none of this is possible if developers are forced to change the way they work or switch back and forth between different tools. Code Sight is great, embeds market-leading open source and code analysis technology, according to the developer's speed requirements optimized, and can be integrated directly into the tools they are using.”