Software composition analysis (SCA)¶

• Scan all third-party dependencies

• Track transitive dependencies

• Monitor for newly disclosed vulnerabilities

Tools:

• Snyk

• Dependency-Track

• OWASP Dependency-Check