Description

Veracode Software Composition Analysis (SCA) is an open-source vulnerability detection solution designed for IT security administrators and application developers. It enables users to discover and fix vulnerabilities within libraries, create code quality gates with custom policy management, conduct regulatory compliance analysis, identify code errors, prescribe changes, create auto-pull requests, and track open-source usage. Features include remediation management, software bill of materials (SBOM) generation, dependency graph support, cross-risk analytics, peer benchmarking, and auditable mitigation workflow management.