Overview of IBM ZCodeScan features
IBM ZCodeScan is a static analysis tool for z/OS applications (COBOL and PL/I) that identifies security vulnerabilities (e.g., SQL injection, buffer overflows) and enforces coding best practices. Key features include:
- Security Vulnerability Scanning: Detects risks like unprotected credentials.
- Built-in & Custom Rules: Provides standard best-practice rules and allows organization-specific rules via rule model files (e.g.,
rules-domains.yaml). - Real-time Linting: Provides instant feedback within Z Open Editor during editing.
- Baseline Management: Suppresses known issues to focus on new findings.
- AI Integration: Uses Model Context Protocol (MCP) to provide scan results to AI Chat clients.
- CLI Support: Available in IBM Developer for z/OS Enterprise Edition for use in pipelines or workstations.
Note: ZCodeScan requires COBOL and PL/I programs to be free of syntax errors to be scanned.