Description

Checkmarx SCA is a next-gen software composition analysis solution designed for development and AppSec teams. It enables users to scan software’s codebase to detect open source libraries, including direct and transitive dependencies, identify the specific versions in use, visualize potential risks to intellectual property or copyright resulting from open source license conflicts or non-compliance, evaluate potential risks to operations resulting from shifts in community activity for a given component, and automate project creation and analysis based on pull requests at the repository level. Features include summary metrics, automatic dependency path visualization, integration with SDLC and CI/CD pipelines, issue management, and reporting capability.