Glossary: Vulnerability Management and Monitoring

dependency scan

Also written: software composition analysis, SCA, dependency monitoring, package monitoring

A scan that reads the list of software libraries an application uses and reports any with known CVEs. Developers call it software composition analysis.