Skip to content

Glossary: Security Operations and Incident Response

SCA (software composition analysis)

Also written: dependency scanning

Checking third-party libraries (dependencies) against lists of known vulnerabilities at build time.

Where the book teaches it

Related terms

DependenciesSBOM (software bill of materials)SAST (static application security testing)