Software Composition Analysis (SCA) & Supply Chain Security Questions

Understand how to identify and manage third-party dependencies and open-source components. Know tools and techniques for detecting vulnerable dependencies, managing license compliance, and responding to supply chain attacks. Discuss how to evaluate third-party security, conduct security reviews of dependencies, and maintain a software bill of materials (SBOM).