/tags/license/Recent content in License on Software FactoryHugoen/use/tools/blackduck-sca/Mon, 01 Jan 0001 00:00:00 +0000/use/tools/blackduck-sca/<div style="display: flex; align-items: flex-start; gap: 1.5rem; margin-bottom: 1rem; max-width: 80%;"> <img src="/logo/icon_Black_Duck_SCA.svg" alt="Black Duck" width="150" style="flex-shrink: 0;"> <div><p>Black Duck is the Software Factory&rsquo;s most complete <strong>Software Composition Analysis</strong> (<a href="/use/practices/secure/software-composition-analysis/">SCA</a> ) solution. It combines four detection techniques to build a complete dependency inventory — including dependencies that other tools miss, such as copy-pasted open source code and components embedded in compiled binaries.</p> <p>This process helps in identifying known security vulnerabilities (CVEs/BDSAs), license compliance violations, operational risks, and generating a comprehensive Bill of Materials (BOM) for your applications.</p>