Software composition analysis
Named by 4 kept items in this workspace.
Search every workspace for Software composition analysis. It matches the name as written, so it can find other things that share it.
The items that name it 4
identifies open-source dependencies and checks them against CVE databases; parses build manifests and inspects binaries for statically linked libraries to build SBOM
Deterministic security method; the LLM-only agent was observed 'hand-rolling' this from scratch by grepping version strings and walking package.json files
OSV-backed dependency vulnerability scanning via 'foxguard sca .'
Dependency vulnerability scanning and SBOM generation via Trivy/Grype
All techniques in this workspace.