Version 2021.8.0 introduces support for Black Duck Sigma, a new tool for performing rapid SAST scans. Sigma runs in the Code Sight extension to Microsoft® Visual Studio® Code.
Discontinued support
- End-of-life (EOL): Support for Eclipse 4.7 has been discontinued.
- Support for version 4.8 and version 4.9 of Eclipse has been deprecated, and will be discontinued in a future release of Code Sight.
- End-of-life (EOL): Support for Visual Studio Code 1.50 and 1.51 has been discontinued.
- Support for VS Code 1.52 through 1.54 has been deprecated, and will be discontinued in a future release of Code Sight.
- End-of-life (EOL): Support for Coverity 2019.09 has been discontinued.
- Support for Coverity 2019.12 has been deprecated, and will be discontinued in a future release of Code Sight.
- Support for macOS 10.14 has been deprecated, and will be discontinued in a future release of Code Sight.
Beta support
These tables show the IDEs and products that are supported in beta.
| IDE | Versions | Platforms | Languages |
|---|---|---|---|
| Android™ Studio | 3.4 – 4.2 | Windows®, Linux™, macOS® | Java™ |
- The Android Studio environment uses the same installation steps as IntelliJ.
Enhancements
- The Sigma (Rapid Scan SAST) tool is now supported in Visual Studio Code.
-
Code Sight introduces support for Black Duck Rapid Scanning.
The support is available when connecting to a Black Duck server that provides version 2021.6.0 or newer.
Rapid Scanning provides faster SCA scans, and it introduces the ability to detect global policy violations. This provides a way for developers to quickly determine if the versions of open source components violate corporate policies regarding the use of open source.
- Release 2021.8.0 adds support for Android Studio 4.2.
- Release 2021.8.0 adds support for Visual Studio Code versions 1.56 through 1.58.
- Release 2021.8.0 adds support for Eclipse 2021-06 (4.20).
-
For Coverity (SAST) issues, the Issue Details panel now shows the Coverity Connect ID (CID) or Polaris issue ID when
this value is available. In the Issues list, you can now search for issues using these ID values.
(When running standalone, the ID field shows the value generated by Code Sight, as in previous versions of the plug-in.)
- Code Sight now has explicit Manual Proxy preference settings so administrators and users can manage proxy setup as needed.
Bug fixes
-
When using Polaris version 2021.5.0 or newer, Code Sight now supports project names that include slash
characters (‘
/’ or ‘\’). UD-7200 - Code Sight now successfully handles problems on start up that arise because it does not have read, write, or execute permissions for its default working directory. UD-7333
- When running in PhpStorm or WebStorm, the plug-in would not show notifications or report scan results. This has now been fixed. UD-7586
- Fixed an issue where Code Sight tried to use the Coverity Analysis .dmg installer, which is not yet supported by Code Sight. Instead, Code Sight now always installs using the .sh installer. UD-7860