Software Composition Analysis with Black Duck
Overview
Perform comprehensive Software Composition Analysis (SCA) using Synopsys Black Duck to identify security vulnerabilities, license compliance risks, and supply chain threats in open source dependencies. This skill provides automated dependency scanning, vulnerability detection with CVE mapping, license risk analysis, and remediation guidance aligned with OWASP and NIST standards.
Quick Start
Scan a project for dependency vulnerabi
[Description truncada. Veja o README completo no GitHub.]