Klocwork 2020.3 GA
September 10, 2020
is part of Perforce’s comprehensive testing solution that includes
static application security testing (SAST), static analysis for
functional safety compliance, enterprise-class web and mobile testing
solutions, and compliance traceability.
Development and DevOps teams rely on Klocwork as it provides a single
solution for simplifying security defect analysis, and offers
comprehensive coverage for multi-language apps.
The latest release — Klocwork 2020.3 — expands Klocwork’s Continuous
Compliance functionality with faster analysis, broader coverage,
increased accuracy, and seamless integration into developer and DevOps
Enhanced DevSecOps Functionality
Klocwork makes automated security testing easy with integrations for
development and DevOps tools — enabling developers to run an analysis
anywhere. This includes support for desktop IDEs, CI/CD pipelines,
containers, cloud build systems, and machine provisioning.
A defining feature of Klocwork is that it has been designed to integrate
seamlessly with CI/CD pipelines to automate Continuous Compliance —
safeguarding software from vulnerabilities with each commit. An integral
part of this process is Klocwork’s Differential Analysis, which delivers
developers fast results by analyzing only the files that changed —
providing them with the shortest analysis times.
Enhanced C# and Java Analysis Engine
Klocwork 2020.3 features an improved C# and Java analysis
engine with broader language support, improved accuracy, and new defect
Other notable improvements include:
analysis engine provides greater accuracy with a 33%* increase to defect
detection and provides the ability to write custom syntactic and
interprocedural data-flow rules.
Java analysis engine provides 130% greater accuracy with a 2.5%*
increase to defect detection and broader framework coverage.
New and expanded security coding standard coverage and
vulnerability checks for CWE, CERT, and PCI DSS.
Introduction of the Klocwork Community — A framework for our users and
professional services team to help shape the future of our coding
New DevOps Integrations
Klocwork Jenkins Plugin — Setup a security testing pipeline
Klocwork CLion IDE Plugin — Shift defect detection to your
(*Based on internally benchmarked OSS projects.)
These improvements have helped solidify Klocwork as the most accurate
and precise comprehensive testing solution for DevSecOps across all
embedded software development industries.