SoftSafe Tech and Horizon Robotics begin software security collaboration

SoftSafe Tech Partners with Horizon on Software Security

Scope of collaboration

The development of intelligent driving involves algorithms, chip software, toolchains, and a large number of third-party components. The partnership focuses on identifying open-source elements, software bill of materials (SBOM), license analysis, and source code defect detection, linking the results to specific versions and handling records in the development process.

How the two tools fit into the development workflow

SourceSeer SCA identifies open-source components within source code, binaries, and containers. It outputs information on components, versions, vulnerabilities, and licenses, supporting the generation of SBOMs. The team can confirm actual usage relationships to arrange upgrades, replacements, or exceptions.

StatiCode performs static analysis for C/C++, Java, C#, JavaScript, TypeScript, Go, PHP, and Python languages, checking runtime defects and coding standards. The detection results must be reviewed in conjunction with call paths, compilation configurations, and test evidence.

Future collaborations will continue to advance through actual development scenarios, ensuring that component lists, code inspections, and records of issue resolution can be compiled into a continuous trail of software security evidence.