• STATUS
  • POLICY
  • AUDIT
  • HUMAN

How to verify BOM compliance with your AI

Connect Black Duck to your AI client once. From there, you can audit software compositions and security policies directly in your chat.

Ask AI about this page

Short answer

How can I check my BOM compliance using AI?

Your agent pulls the current calculation status of your Bill of Materials and lists your active security policy rules. You'll see exactly where your software stands against your security standards.

Compliance outcomes.

Where your data lands.

The AI sorts your Black Duck information into these specific areas.

STATUS

BOM calculation state

The AI checks if your Bill of Materials is still processing or finished. You'll know immediately when the data is ready.

POLICY

Active security rules

Your agent retrieves the specific policy rules currently active in your environment. This shows you the requirements your software must meet.

AUDIT

Compliance gaps

The AI compares your BOM status against your rules to find mismatches. You get a clear view of where your components fail security checks.

HUMAN

Manual remediation

The AI flags the issues, but you have to fix them. You'll need to manually update dependencies or change policies in Black Duck to resolve violations.

The workflow

What your AI does when the data arrives.

The AI acts as a bridge between your chat interface and your Black Duck security data.

  1. Check BOM progress

    The AI checks the current state of your Bill of Materials to see if the analysis is complete.

    get_bom_status

  2. Fetch security rules

    Your agent retrieves the list of active security policies that govern your software components.

    list_policy_rules

  3. Compare data

    The AI looks at the BOM status and the policy rules together to find mismatches.

    get_bom_statuslist_policy_rules

  4. Report findings

    The AI presents a summary of whether your current software composition complies with your rules.

    get_bom_status

Try it

Copy these to start.

Use these prompts to begin your compliance check.

Starting points

These are opening lines. Swap out the project names or policy IDs with your actual Black Duck identifiers.

Black Duck (Synopsys) Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_eTCyoXvtTgK3EkQ58yH9XVC5hI8lZOw5G2qwRxyC/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Black Duck (Synopsys) capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "black-duck-synopsys-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_eTCyoXvtTgK3EkQ58yH9XVC5hI8lZOw5G2qwRxyC/mcp"
    }
  }
}
Copy into chat04

  • What is the current calculation status for the 'web-app-prod' BOM?

  • List all active security policy rules for my current project.

  • Check the status of the 'mobile-sdk' BOM and tell me if it meets our security policies.

  • Are there any active policy rules I should be aware of for the 'legacy-api' component?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Black Duck once, then ask.

Link your Black Duck account once. Your credentials stay encrypted, and you can immediately start asking questions about your software security.

Connect Black Duck to your AI

FAQ

How this task behaves.

  • 01

    Can the AI fix security violations automatically?

    No. The AI identifies where your BOM fails to meet policy rules, but you must perform the actual remediation in Black Duck.

  • 02

    Can the AI create new security policies?

    No. The AI can only list existing rules. You must manage policy creation within the Black Duck interface.

  • 03

    Does the AI see all my Black Duck data?

    The AI only sees the data it can access through the specific tools provided, such as BOM status and policy rules.

  • 04

    How often does the AI check the BOM status?

    The AI only checks the status when you explicitly ask it to via a prompt.

  • 05

    Can I use this with any AI client?

    Yes, you can use this with any MCP-compatible client like Claude, Cursor, or Windsurf.

  • More questions about Black Duck? See everything the Black Duck Connector can do

Connect Black Duck (Synopsys) to Claude, Cursor, ChatGPT & more