sca

Veracode Software Composition Analysis Component This Veracode Software Composition Analysis (agent-based scan) Component will run Veracode SCA agent based SCA solution.

Run the Veracode SCA similar as the script in textual output mode Ability to create issues for identified vulnerabilities without creating duplicates Ability to run the scan on a remote repository Ability to run the scan with the --quick flag

Vulnerability Static Analysis for containers in GitLab CI

https://docs.gitlab.com/ee/user/application_security/container_scanning/

AWS CDK program for running Dependency Track in AWS. The CDK program creates a VPC, a public and private subnet, ECS cluster and tasks for running the Dependency Track containers, and an Aurora Postgres DB cluster for the storage of your data.

By running this in your AWS account you will incur costs. Check the plan and deploy if comfortable.