Black Duck Extends Scope and Reach of Code Scanning Tool
DevOps.com, Friday, July 24th, 2026
Black Duck enhanced Coverity with AI integrations, security prioritization and new vulnerability detection.
Black Duck updated its Coverity static analysis tool with an MCP server that lets AI coding agents run local security scans, a security impact lens for compliance prioritization, and a new checker that identifies IDOR vulnerabilities in JavaScript and TypeScript.
The release adds AI-assisted issue triage for C and C++ code plus Rust 1.92 support. These enhancements respond to accelerating vulnerability discovery needs as AI-generated code overwhelms DevSecOps teams and attackers use advanced models to find and exploit flaws faster.