CodeScoring is a comprehensive modular platform for secure software development. It includes:
- CodeScoring.SCA — software composition analysis with auto-detection of open source dependencies, vulnerability identification, and license compatibility checks. It generates a Software Bill of Materials (SBoM) and a dependency graph. The universal agent seamlessly integrates into CI/CD pipelines.
- CodeScoring.OSA — supply chain protection that checks third-party components for policy compliance and enforces blocks when necessary. It supports Nexus Repository Manager and JFrog Artifactory PRO.
- CodeScoring.TQI — assessment of key technical debt indicators, cyclomatic complexity, and developer profiles with verified competencies.
- CodeScoring.Secrets (beta) — detection of sensitive information and secrets within the source code.
This solution is deployed on-premises, integrates with existing tools, and supports all major package manager ecosystems.