Black Duck release updates

Black Duck Detect 12.0.0 improves software composition analysis governance by adding controls for UV dependency groups, npm workspaces, Bazel dependencies, and empty scan results. Java 8 support is removed, Java versions below 17 are deprecated ahead of Detect 13.0.0, and Docker Inspector is scheduled for removal in 13.0.0. Enterprises should update CI runner standards, firewall allow lists, and scan policies before upgrading.

• Black Duck
• Detect
• CI/CD

Black Duck Detect 11.5.1 fixes a Gradle init-script regression in which phantom subprojects could receive an empty configuration set and report zero components. The release also resolves a component-location analysis exception triggered by spaces in version strings. For enterprises, the result is more dependable BOM evidence for release approvals, open-source risk decisions, and audit records.

• Black Duck
• Detect
• CI/CD

Black Duck Detect 11.5.0 strengthens software composition analysis evidence by correcting dependency parsing and build-tool edge cases that could produce incomplete or inaccurate BOMs. The release moves Quack Patch output into the Detect scan output directory, includes it in diagnostic archives, and adds operational guidance for renamed download domains, SCASS network access, CentOS deprecation, and the planned Java 8 support sunset. Enterprise teams should validate scan-success policies where empty BOMs are now an expected outcome for projects with no dependencies or no matching binaries.

• Black Duck
• Detect
• CI/CD

Understand how Black Duck SCA 2026.4.1 impacts software supply chain security, CI/CD governance, SBOM management, and enterprise risk reporting.

• SCA
• DevSecOps

Learn how Release 11.4.2 reduces false CI/CD failures by validating Quack Patch configurations only when enabled.

• Black Duck
• Detect
• CI/CD

Learn how Black Duck SCA 2026.4.0 improves API reliability, binary scanning, and enterprise software supply chain governance.

• Black Duck
• SCA
• API

Coverity 2026.3.0 improves AppSec governance with API enhancements, OWASP reporting, Kubernetes deployment scripts, and stronger scan precision.

• Black Duck
• Coverity
• AppSec
• SAST

Black Duck Signal uses agentic AI to detect and remediate vulnerabilities across code, binaries, and software supply chains, helping enterprises secure AI-generated code within modern DevSecOps pipelines.

• Black Duck
• Signal
• Agentic AI
• DevSecOps

Black Duck SCA 2026.1.0 strengthens APIs, binary scanning, and stability, helping enterprises automate DevSecOps, improve SBOM accuracy, and enforce risk-based release governance at scale.

• Black Duck
• SCA
• DevSecOps
• SBOM