spdx / outreach

content for outreach activities
4 stars 9 forks source link

[Tool Request]: Polaris Software Integrity Platform #72

Open closerb4 opened 2 weeks ago

closerb4 commented 2 weeks ago

Tool or Product name

Polaris Software Integrity Platform

Open Source or Proprietary

proprietary

Company or Organization name

Synopsys

Organization or Company Logo Usage

Public Contact Email or URL

info@synopsys.com

Product or tool website

https://www.synopsys.com/software-integrity/software-composition-analysis-tools.html

Description

The Polaris Software Integrity Platform® uses its fAST SCA (software composition analysis) engine to help teams manage the security, quality, and license compliance risks that come from using open source and third-party code in applications. Manage software supply chain risks and make software bills of materials (SBOMs) part of the entire app lifecycle.

SBOM tool category

SPDX Versions supported

SPDX verification

Polaris fAST SCA uses the https://github.com/spdx/Spdx-Java-Library to generate SPDX compliant SBOMs.

How to procure

Visit https://www.synopsys.com/software-integrity/polaris.html for more information. Contact us to schedule a demo or with questions at https://www.synopsys.com/software-integrity/contact-sales.html

Installation instructions

The Polaris Software Integrity Platform is a cloud-hosted, as-a-service application security testing (AST) platform. Users may log in, set up SSO, and connect via API and other out-of-the-box SDLC integrations. For more information, review the Polaris documentation at https://sig-product-docs.synopsys.com/bundle/polaris/page/documentation/r_org-how.html

Link to quick start guide

https://sig-product-docs.synopsys.com/bundle/polaris/page/documentation/c_product-overview.html

closerb4 commented 2 weeks ago

Synopsys logo