FOSSA VS Coverity Scan

FOSSA Reviews

Coverity Scan Reviews

FOSSA mentions (7)

• A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

  FOSSA - Scalable, end-to-end management for third-party code, license compliance and vulnerabilities. - Source: dev.to / 3 months ago

• The Haskell job market has been growing steaily since 2008

  For us, there were a couple advantages. For context, I work at FOSSA (https://fossa.com/). Our core product solves software supply chain needs in enterprises (around licensing and security), and our core technology is around compiler, build, and source code analysis. Off the top of my head, 3 advantages stood out: 1. First, if you're not going that far off the beaten low-level path, Haskell has incredible... - Source: Hacker News / 10 months ago

• How to Automate the Software Bill of Materials (SBOM)

  In this example, we'll explain how to create SBOM with FOSSA, an open-source dependency management tool ranked as the most significant SCA solution by the Forrester Wave. It helps you protect your software from open source risks such as supply chain threats and license violations. - Source: dev.to / over 1 year ago

• SBOM management

  I saw https://fossa.com/ and https://anchore.com/ which seem to solve what I have in mind but I wanted to know if there's maybe an open source way of getting a better overview besides running trivy sbom everytime I want to know something about a given sbom file. Source: over 1 year ago

• Keeping Up With Vulnerable Third-Party Libraries

  Our current project runs a Fossa scan as part of the automatic pipeline. Source: almost 2 years ago

Coverity Scan mentions (4)

• I created this point of sale system for restaurants and hospitality. The All-In-One has a 15.6" touchscreen running a Raspberry Pi Compute Module 4L and is made by Chipsee in Bejing, China. I'm helping a friend install it in a restaurant on the St. Lawrence River where he is the Executive Chef.

  You can use Coverity for free on open source code. I use it on an app I open sourced for packet processing. https://scan.coverity.com/. Source: over 2 years ago

• Free for dev - list of software (SaaS, PaaS, IaaS, etc.)

  Scan.coverity.com — Static code analysis for Java, C/C++, C# and JavaScript, free for Open Source. - Source: dev.to / almost 3 years ago

• CDN dollar just hit 6 year high.

  I personally remember Coverity Scan being completely offline for like 6 months while they tried to deal with infrastructure abuse from people mining bitcoin on their computing clusters. Source: about 3 years ago

• GCC 10.3 has been released

  > Does anyone know any good static analysers other than gcc's or clang's? Visual C++ as well, because since the XP SP2 issues, Microsoft has come up with SAL, which you can also use on your own code, https://docs.microsoft.com/en-us/cpp/code-quality/using-sal-annotations-to-reduce-c-cpp-code-defects?view=msvc-160 Then specialized tooling just for this purpose, just two examples, https://scan.coverity.com/... - Source: Hacker News / about 3 years ago