The Benefits of SAST and SCA in Your IDE - Utsav Sanghani - ASW #101

<p>Static application security testing (SAST) is critical for uncovering and eliminating issues in proprietary code. However, over 60% of the code in an average application today is composed of open source components. SAST isn't designed to find open source vulnerabilities (CVEs) or identify open source licenses. And manually maintaining a repository of approved open source components for developers is inefficient and time-consuming. That’s where software composition analysis (SCA) comes in. Introducing a new functionality within the Code Sight IDE plugin that combines SAST and SCA in one place to enable secure development.</p> <p> </p> <p>For more information, visit: <a href= "https://securityweekly.com/synopsys">https://securityweekly.com/synopsys</a></p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://wiki.securityweekly.com/ASWEpisode101">https://wiki.securityweekly.com/ASWEpisode101</a></p>