🧰 SCA

The items that name it 14

• The OpenSourceMalware Show #27
  talkas tools2026-10-29It is written here as SCA (software composition analysis; the hosts note it struggles with vendored C code).

  software composition analysis; the hosts note it struggles with vendored C code

• Code security for new coders
  articleas tools2026-10-26It is written here as Software Composition Analysis (SCA).

  Scans open-source dependencies for vulnerabilities and usually reports the version to upgrade to

• What Is SAST? Static Analysis in the Age of AI-Generated Code | Endor Labs
  articleas tools2026-10-12It is written here as SCA (Software Composition Analysis): scans open-source dependencies for known vulnerabilities (CVEs).

  Software Composition Analysis

• Executive Order 14028 SBOM Requirements: What to Comply With and How | Endor Labs
  articleas tools2026-10-12It is written here as Software composition analysis (SCA): captures build-time inventory including transitive dependencies.

  SCA

• Guide to Implementing Software Supply Chain Security | Endor Labs
  articleas tools2026-10-12It is written here as SCA (Software Composition Analysis): examines dependencies for known vulnerabilities.

  Software Composition Analysis

• State of Dependency Management 2025 | Endor Labs
  paperas tools2026-10-12It is written here as SCA (software composition analysis; recommended for scanning AI-generated code).

  software composition analysis; recommended for scanning AI-generated code

• OSS Vulnerabilities And The Digital Operational Resilience… | Blog | Endor Labs
  articleas tools2026-09-11It is written here as Software Composition Analysis (SCA).

  Industry-standard approach for discovering OSS components/dependencies and evaluating them for vulnerability risk.

• The Secure Agentic Development Lifecycle (ADLC), Explained | Blog | Endor Labs
  articleas tools2026-09-02It is written here as SCA (Software Composition Analysis).

  Rule-based tool that catches known CVEs in dependencies; described as often missing transitive dependencies

• AI Code Review: How to Actually Review Code an Agent Wrote | Blog | Endor Labs
  articleas tools2026-09-02It is written here as SCA (Software Composition Analysis).

  Checks open-source dependencies for known vulnerabilities

• apisec-inc/AI-Surface
  repoas tools2026-07-11It is written here as SCA (Software Composition Analysis, unnamed).

  Dependency scanning (cited as analogous pre-merge check)

• What nearly 10,000 developer environments reveal about agentic development risk
  articleas tools2026-06-23

  Software composition analysis, part of existing AppSec controls that remain essential but insufficient alone against agentic risk

• Hard Truths: You've Built a Security Stack. Have You Built a False Sense of Security? | Tanya Janca
  videoas classification.technologies2026-05-27It is written here as SCA: Software Composition Analysis for dependency and supply-chain auditing.
• Episode 3: Malicious Dependencies Aren't an Accident
  videoas tools2026-05-22It is written here as Software Composition Analysis (SCA): Scanning tooling used to enforce dependency policies in pull requests.

  SCA

• Alice and Bob Learn Secure Coding: Chapter 2
  videoas tools2026-05-11It is written here as SCA (Software Composition Analysis): Audits third-party open-source libraries and frameworks.

  Software Composition Analysis

In every workspace you can read 20