СodeScoring

CodeScoring is a Russian platform for secure software development. The solution helps organizations to store artifacts and control access to them, manage risks related to open-source usage, meet license requirements, control quality and transparency, and prevent confidential data leaks.

The solution has five modules for five different functional areas:

CodeScoring.Save — artifact management: storing and distributing internal packages and container images, proxying and caching external dependencies;

CodeScoring.SCA — composition analysis: creating a comprehensive list of program components, identifying and analyzing vulnerability reachability, and license compatibility check; 

CodeScoring.OSA — supply chain protection: checking third-party components for compliance with security policies, blocking upon non‑compliance;

CodeScoring.TQI — evaluation of code quality: defining the parameters of technical debt, tracking the progress of the projects, building developer profiles;

CodeScoring.Secrets — identification of secrets: Identifying sensitive data in source code, ML‑based evaluation of findings.

CodeScoring is installed as an on-premise solution, integrated with popular tools for software storage, development, and deployment, has a flexible policy system, and supports key ecosystems of package managers.