The original post: /r/cybersecurity by /u/0ver7hinker on 2024-11-23 12:53:20.

I am intrested to know which SCA tools does your organization use (is it classic SCA or SCA via SBOM). What were the factors you took in mind before evaluating the tools. (I.e dependency coverage, tested for multiple languages and frameworks, container scanning, how efficiently it can find transitive issues etc)