Black Duck C/CPP tool release notes

Black Duck C/CPP 3.0.6

BDCCPP-51 - Added support for BDS_JAVA_HOME.
BDCCPP-47 - Added support for blackduck-c-cpp to pull Linux ARM, Mac ARM, and Windows ARM packages for the Scan CLI in Black Duck SCA versions 2025.7.0 and later.
BDCCPP-55 - Fixed error related to pandas 3.0.0.
BDCCPP-49 - Resolved a bug that caused excessive instances of the dpkg query to be generated.

BDCCPP-23 and BDCCPP-25 - Added Coverity mini package support for Mac ARM.
BDCCPP-41 - Added Coverity mini package support for Linux ARM (Coverity Mini-package will be deployed on July 17, 2025).
Fixed bug added in previous release for Windows platform with no files being sent to BDBA.

BDCCPP-43 - Used new scan cli versioning, supported for documented minimum required user roles.

BDCCPP-37 - Fixed Coverity build failure with 32bit compiler on Linux.
BDCCPP-40 - Fixed relative paths issue causing non-working BDIO from a C/CPP run.

BDCCPP-29, BDCCPP-32 – Black Duck branding changes.
BDCCPP-30 - Moved default cov_output/blackduck directory from .synopsys to .blackduck with backwards compatibility.
BDCCPP-22 – Fix for project_group_name property not updating properly.
BDCCPP-33 - Added Performance improvement in package manager phase. Used asyncio library for dpkg/rpm calls which gave ~5x performance improvement.

BDCCPP-18 - Coverity mini package is updated to 2024.7 in GCP. So, documentation changes are updated for bazel in PyPi.

BDCCPP-12 – Fixed bug for BDBA upload failure due to long running cov stage.
BDCCPP-14 – Added support for setting project description (same as –detect.project.description property).
BDCCPP-16 – Added documentation for using cov-configure with command line.
BDCCPP-17 – Added support for cov_output_dir to accept existing idirs generated by Coverity that are not named “idir”.

BDCCPP-2 – Added blackduck-c-cpp tool support for 3.12 python version.
BDCCPP-4 – Fixed blackduck-c-cpp vulnerability for certifi==2022.12.7 - CVE-2023-37920.
BDCCPP-5 – Fixed snippet scan failure regression.

KBHUB-23899 – Fixed blackduck-c-cpp tool results in BOM stored under different project name for scans larger than 5gb.
KBHUB-24098 – Fixed an issue where blackduck-c-cpp could fail when it is not able to get version information from Coverity in Windows.
Fixed Windows failure when adding cov_configure_args.
Fixed BDBA zip to not have any source data.

Move from cov-build to cov-cli by default - KBENG-4254. Add documentation and Instructions for running cov-cli or cov-build.
In CentOS7, the latest version of glibc supported is 2.17. Starting with coverity build capture 2022.12.0, glibc_2.18 is a requirement. So, we try to auto-download an older version of Coverity, 2022.9, on linux platforms with glibc 2.17 or older.
KBHUB-23236 - Fixed an error when opening cov_emit_links.json with non-utf-8 encoding.
Added documentation for KBHUB-23004.
Get BDIO splitter changes from https://github.com/blackducksoftware/json-splitter.

Added Documentation for offline scan for scans over 5GB.
KBHUB-22588 - Remove calling ProcessPoolExecutor inside another ProcessPoolExecutor.

KBHUB-21926 - Add support for 'Project Group' as a property in blackduck-c-cpp tool (like how detect does detect.project.group.name).
Updated documentation on PyPi for skip_build, json_splitter and scan_cli_dir for clarity.

Added documentation for steps to be done to capture linker files with bazel.
KBHUB-22244 - Moved from tar to zip for performance improvement in sig scan and BDBA matching.
KBHUB-22272 - Snippet scans were failing in 1.0.20 release, fixed it in this release.

Fixed bug while uploading bdio in sig scanner.
KBHUB-21965 – Added support for bdio splitter.
Changed variable name from disable_json_splitter to disable_bdio_json_splitter.
Fix symlink bug in sig scanner when using expand_sig_files switch.