ishenwei/nexus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Auto-sync: 2026-04-21 17:12

Browse Source
This commit is contained in:
weishen
2026-04-21 17:12:45 +08:00
parent 914c8f6925
commit 0fe7ba237f
1888 changed files with 220 additions and 68174 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
wiki/concepts/SCA.md
View File

@@ -1,21 +0,0 @@
---
title: "SCA（软件成分分析）"
type: concept
tags: [安全, 依赖, 开源]
sources: [what-is-devsecops-best-practices-benefits-and-tools]
last_updated: 2026-04-16
---
## Definition
SCA（Software Composition Analysis）专注于分析应用程序使用的第三方组件（库和框架），识别已知安全漏洞和许可证合规问题。
## Characteristics
- 在开发早期（计划/设计阶段）使用
- 检测开源依赖中的已知漏洞
- 验证许可证合规性
- 常用工具：Snyk、OWASP Dependency Check
## Connections
- [[DevSecOps]] ← uses ← [[SCA]]
- [[CI-CD-流水线]] ← integrates ← [[SCA]]
- [[SDLC]] ← embeds ← [[SCA]]