Version 1.0.1

Overview

Black Duck for Google Cloud Platform (GCP) enables you to scan applications and containers built and deployed on the Google Cloud Platform. With Black Duck on GCP, you can create a new project in Black Duck, or write results to an existing Black Duck project. After scanning your GCP applications and containers, a Bill of Materials (BOM) is created, and is available in Black Duck. Additionally, Black Duck for Google Container Registry (GCR) enables you to scan images stored in GCR.

References

For additional information, refer to the following topics.

...

Introduction

There are several ways to use Synopsys products in a Google Cloud Platform (GCP) environment. Products can be deployed (installed) in GCP, and Black Duck / Coverity scans can be invoked in GCP using Synopsys Detect. Both scenarios are described, below.

Deploying Synopsys Products

Black Duck can be easily deployed on Google Compute Engine from the GCP Marketplace. Black Duck can also be installed in Google Kubernetes Engine using Synopsys Operator. 

The OpsSight solution, which consists of Black Duck and OpsSight Connector, can be deployed in Google Kubernetes Engine. 

Invoking Synopsys Scans

Synopsys scans are invoked using Synopsys Detect, which consolidates the functionality of Black Duck™ and Coverity™ on Polaris™ client-side tools into a single tool. Synopsys Detect also makes it easier to set up and scan code bases using a variety of languages and package managers. Synopsys Detect can be invoked:

• In Google Cloud Build as a Custom Build Step, to scan with Black Duck and (optionally) perform an attestation for Binary Authorization. 
• From other CI systems that run on Google Cloud. See our Synopsys Detect documentation for details.  
• From your local workstation, for ad-hoc scanning. See our Synopsys Detect documentation for details.

Refer to the following links for more information about how to use Synopsys Detect with Google Cloud Platform.

References

Refer to the links below for more information about how to use Synopsys products in Google Cloud Platform.