To run Black Duck SCA in Code Sight, a system must meet certain requirements.
Java support
The system must be configured to run the Java® Development Kit (JDK), release 8 or higher.
Scan engine
We highly recommend that you verify that the locally installed Black Duck SCA scanning component, Black Duck® Detect, is the most recent version. Recent versions of Detect are posted in the Black Duck Artifactory.
The package manager and build support
The package manager for the projects to analyze, and the build tool or tools it uses, must have been
installed and be specified in the system’s PATH variable.
User credentials
Each user account must be configured to meet the following conditions:
- The user must have access to check for component security vulnerabilities.
- It must be possible to check each component against the projects accessible to the user, and the global policies configured on the Black Duck SCA server.
- All dependencies must be resolvable. That is to say, each dependency must have been installed using the package manager’s cache, virtual environment, and other environmental settings.
Internet access
To communicate with the Black Duck SCA server, the system must be connected to the Internet.
The plug-in downloads the Detect application from the URL that is saved on the Administration → System Settings page for your Black Duck SCA account. By default, this Hosting location value points to the Black Duck Artifactory. You can configure Black Duck SCA to download Detect from a different location: See Specify a custom download location for Black Duck Detect.