Out-of-the-box integrations

Code Sight integration

Black Duck® Code Sight™ provides an interface for viewing issues reported by various Black Duck products, to help improve the security and reliability of your source code. After you connect Code Sight to Polaris, you can:

• View issues captured in Polaris in your IDE (in Team View).
• Run tests on Polaris from your IDE with VS Code.

For more information, see Connect Code Sight to Polaris.

Issue tracking integrations

Manually export issues captured in tests, or use issue policies to automatically export issues to a third-party issue tracking platform. For Jira Cloud and ServiceNow, you can also configure two-way synchronization of Polaris triage statuses and ticket statuses. Supported platforms include:

• Azure DevOps
• Jira
• ServiceNow

For more information, see Issue tracking integrations.

SCM integrations

Run automated tests when commits are made in your repositories. Supported SCMs include:

• GitHub
• GitLab
• Bitbucket
• Azure DevOps

For more information, see Connect a Polaris project to a repository in your SCM and Connect Polaris to Multiple SCM Repositories.

Secure Code Warrior integration

Enable the Secure Code Warrior integration to include links to free training resources with issue details, when available.

For more information, see Integrate Secure Code Warrior with Polaris.

Issue Management MCP server

Use the Issue Management MCP server to retrieve data from Polaris with your preferred AI assistant. The MCP server enables you to:

• Query your security findings using natural language in AI assistants
• Retrieve issue details, remediation guidance, and portfolio metrics

The MCP server is hosted in Polaris and requires only a Polaris access token for authentication. No installation or deployment is required.

For more information, see Issue Management MCP server.