Coverity and Black Duck: Supporting developers in working smarter and faster - Seguridad Mania.com - España y América Latina

Static application security testing (SAST) tools such as Coverity® SAST are critical for uncovering and eliminating issues in proprietary software early in the software development life cycle (SDLC). However, SAST isn’t designed to find third-party open source software vulnerabilities or identify open source license types or versions. Open source is an essential component of application development today, with over 70% of code in an average application composed of open source components. And manually maintaining a repository of approved open source components for developers is inefficient and time-consuming. Join Synopsys experts for this Synopsys webinar where they will explore: - Security issues that are easily missed when you don’t use both SAST and SCA - Why adding Black Duck® SCA to your AppSec strategy is the best complement to Coverity SAST - Why only Synopsys solutions can identify context and business criticality and guide developers to the most pressing security issues - How combining software analysis tools lets developers address issues holistically as they code - How Synopsys can intelligently automate and orchestrate your testing needs across the SDLC