CodeSonar 5.2 with Static Application Security Testing (SAST) Available
(Ithaca/New York/USA, Offenburg/Germany, 19 December 2019)
Version 5.2 of GrammaTech CodeSonar is now available for download. The new version of the Static Analysis Tools expands software teams' abilities to perform best-in-class Static Application Security Testing (SAST) across embedded and enterprise customers.
The features in this latest version of CodeSonar provide software development organizations the capability to use a single tool to perform Static Application Security Testing (SAST) to further increase code security, quality, and safety covering both embedded and enterprise applications.
CodeSonar now supports AUTOSAR C++14, the latest C++ coding guidelines from AUTOSAR. With MISRA compliance included in previous releases, the addition of AUTOSAR support now sets CodeSonar at the forefront of the MISRA/AUTOSAR merging of standards.
The release of CodeSonar 5.2 also includes improved compiler support and open standards, with support for new versions of the IAR, GNU C, and CLANG compilers. Updates to C, C++-17, and C++-20 standards have also been incorporated, providing customers with the confidence that CodeSonar support spans from old to new language features. GrammaTech continues its work on open standards including contributing to and supporting SARIF version 2.1. This support also means that CodeSonar can work with the latest versions of IDEs such Microsoft VS Code.
CodeSonar 5.2 continues its tight integration with JuliaSoft by supporting the latest release of the Julia engine, which provides high recall, high precision detection of security vulnerabilities in Java and C#.
Additionally, GrammaTech is expanding support for CodeSonar for Binaries to include support for the Power architecture (PPC) in addition to the existing support for x86 and ARM architectures. The addition of the Power architecture support for CodeSonar for Binaries widens the scope of the product to another key processor family used in embedded and server-based systems such as devices from NXP and IBM.
The update is available as a free upgrade to eligible customers under active support and maintenance contracts. A 30-day trial of CodeSonar 5.2 is available at GrammaTech’s website.