Synopsys Rapid Scan Updated
July 28, 2021

Synopsys announced the availability of new Rapid Scan capabilities within the company's Coverity static application security testing (SAST) and Black Duck software composition analysis (SCA) solutions.

The Rapid Scan features provide fast, lightweight vulnerability detection for both proprietary and open source code. Rapid Scan is optimized for the early stages of development, particularly for cloud-native applications and infrastructure-as-code (IaC).

While comprehensive and thorough security testing is critical to managing risk in the later stages of the software development lifecycle (SDLC), it is often too time- and resource-intensive to perform full scans at every incremental step in the early stages of the SDLC. Rapid Scan complements conventional application security testing activities by enabling development teams to perform fast SAST and SCA scans at every code check-in or early-stage build without slowing them down. It allows developers to shift left efficiently and prevents security issues from propagating into the later stages of the SDLC.

"One of the hallmarks of modern software development is breaking down large processes into smaller, more manageable tasks that can performed rapidly and concurrently in a distributed fashion," said Jason Schmitt, GM of the Synopsys Software Integrity Group. "For organizations embracing DevSecOps, application security testing needs to follow suit. With Rapid Scan, Coverity and Black Duck users can run quick preventative scans to detect and eliminate surface-level vulnerabilities as their developers write and commit code, and they can use the same solutions to run deep scans later in the SDLC prior to deploying their applications."

The new capabilities include:

- Coverity Rapid Scan. The new Rapid Scan capabilities of Coverity SAST provide fast security analysis of proprietary code at the developer's desktop and in continuous integration (CI) pipelines such as GitLab and GitHub Actions. Coverity Rapid Scan is optimized for cloud-native applications built on infrastructure-as-code frameworks such as Kubernetes, Terraform, and CloudFormation, and microservices such as GraphQL, Kafka, and Postman. Rapid Scan can quickly detect many of the most common security weaknesses, as well as problematic misconfiguration flaws and API misuses.

- Black Duck Rapid Scan. The Rapid Scan capabilities of Black Duck SCA allows developers and release managers to perform fast dependency analysis to determine if any of the open source components in their application violate their organization's security and license policies prior to merging code into release branches. Black Duck Rapid Scan is optimized for speed and efficiency by providing developers with early insight into dependency risk and by deferring resource-intensive SCA activities such as multi-factor open source detection and generating a complete software bill of materials to later stages of the SDLC.

- Intelligent Orchestration and Rapid Scan. The Coverity and Black Duck Rapid Scan capabilities can be used in conjunction with Synopsys' Intelligent Orchestration solution to automatically trigger fast SAST and SCA scans based on events in the continuous integration (CI) pipeline. Intelligent Orchestration, which enables DevOps teams to run the right security tests at the right time, can leverage Rapid Scan at early stages in the pipeline when speed and efficiency are critical, and it can run full Coverity and Black Duck scans at later stages in the pipeline when validating the quality and security of applications prior to deployment.

Share this

Industry News

May 19, 2022

Jellyfish announced the launch of Jellyfish Benchmarks, a way to add context around engineering metrics and performance by introducing a method for comparison.

May 19, 2022

Solo.io announced the addition and integration of Cilium networking into its Gloo Mesh platform, providing a complete application-networking solution for companies’ cloud-native digital transformation efforts.

May 19, 2022

Aqua Security announced multiple updates to Aqua Trivy, making it a unified scanner for cloud native security.

May 18, 2022

Red Hat unveiled updates across its portfolio of developer tools designed to help organizations build and deliver applications faster and more consistently across Kubernetes-based hybrid and multicloud environments.

May 18, 2022

Armory announced public early access to their new Continuous Deployment-as-a-Service product.

May 18, 2022

DataCore Software announced DataCore Bolt, enterprise-grade container-native storage software for DevOps.

May 17, 2022

DevOps Institute, a global professional association for advancing the human elements of DevOps, announced the release of the Upskilling IT 2022 report.

May 17, 2022

Replicated announced a host of new platform features and capabilities that enable their customers to accelerate enterprise adoption of their Kubernetes applications.

May 17, 2022

Codefresh announced that its flagship continuous delivery (CD) platform will be made accessible as a fully-hosted solution for DevOps teams seeking to quickly and easily achieve frictionless, GitOps-based continuous software delivery in the cloud.

May 16, 2022

Red Hat announced new capabilities and enhancements across its portfolio of open hybrid cloud solutions aimed at accelerating enterprise adoption of edge compute architectures through the Red Hat Edge initiative.

May 16, 2022

D2iQ announced a partnership with GitLab.

May 16, 2022

Kasten by Veeam announced the new Kasten by Veeam K10 V5.0 Kubernetes data management platform.

May 12, 2022

Red Hat introduced Red Hat Enterprise Linux 9, the Linux operating system designed to drive more consistent innovation across the open hybrid cloud, from bare metal servers to cloud providers and the farthest edge of enterprise networks.

May 12, 2022

Couchbase announced version 7.1 of Couchbase Server.

May 12, 2022

Copado added Copado Robotic Testing to Copado Essentials.