The PVS-Studio static code analyzer is now integrated into the SolidLab SDP secure development platform. This partnership enables automated code analysis across various stages of the software development lifecycle, including CI/CD pipelines, scheduled tasks, or event-triggered scans.
The integration allows for centralized repository scanning without requiring direct embedding into build processes. PVS-Studio complements existing DAST and SCA tools within the platform, supporting projects written in C, C++, C#, and Java. Administrators configure licenses once, with keys stored securely in the platform's secret management system.
Developers can trigger analysis via the platform's API using Git repositories or project archives. Results are automatically published to a centralized findings management system, evaluated against Quality Gate criteria, and can be exported in SARIF format. The platform also supports automated data transfer to external issue trackers and GitLab.
According to PVS-Studio Developer Advocate Valery Filatov, the integration streamlines the adoption of secure software development processes. Kirill Samosadny, head of secure development at SolidLab, noted that this addition enhances static analysis capabilities for clients utilizing the SolidLab SDP platform.
