GitLab: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis)

Опубликовано: 24 Июль 2026
на канале: Romano Roth

10,569

102

What is Software Composition Analysis (SCA) 🧩 in GitLab?
Session 3: In this video, Padi and I will show you how to find vulnerabilities in dependencies in your code by using Software Composition Analysis (SCA) or Dependency Scanning.

▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬
00:00 What is SCA?
00:18 Intro
01:17 Demo project
02:44 Creating the Pipeline file
05:57 Software Composition Analysis
08:37 Examples
08:59 Enabling Software Composition Analysis
10:30 Newest pipeline run
11:37 Where the results are stored
14:04 Summary

▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬
Source Code
https://gitlab.com/romano_roth/gitlab...
Blog-Post
https://www.romanoroth.com/post/gitla...
GitLab
https://about.gitlab.com/
Patrick Steger
  / patrick-steger-ch
Dependency Scanning in GitLab
https://docs.gitlab.com/ee/user/appli...

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
Session 1: What is GitLab 🦊? | The fundamental concepts
   • GitLab: DevSecOps: Part 1/12: What is GitL...
Session 2: Introduction to GitLab 🦊 | Creating a simple project
   • GitLab: DevSecOps: Part 2/12: Introduction...
Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab?
   • GitLab: DevSecOps: Part 3/12: Learn How to...
Session 4: How to ensure License Compliance 📜 in GitLab?
   • GitLab: DevSecOps: Part 4/12: How to ensur...
Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab?
   • GitLab: DevSecOps: Part 5/12: Protect your...
Session 6: How to do Container Scanning 📦 in GitLab?
   • GitLab: DevSecOps: Part 6/12: How to use C...
Session 7: What is Secret Detection 🤫?
   • GitLab: DevSecOps: Part 7/12: How to find ...
Session 8: Dynamic Application Security Testing (DAST)
   • GitLab: DevSecOps: Part 8/12: How to use D...
Session 9: What is Vulnerability Management 📝?
   • GitLab: DevSecOps: Part 9/12: Overcoming V...
Session 10: How to do a Merge Request in GitLab
   • GitLab: DevSecOps: Part 10/12: How to do a...
Session 11: How to do a Schedule Pipeline in GitLab?
   • GitLab: DevSecOps: Part 11/12: How to buil...
Session 12: Our Recommendations
   • GitLab: DevSecOps: Part 12/12: How to buil...

▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬
╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗
║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣
╠╗║╚╝║║╠╗║╚╣║║║║║═╣
╚═╩══╩═╩═╩═╩╝╚╩═╩═╝
   / @romanoroth

▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
LINKEDIN ►   / romanoroth
TWITTER ►   / romanoroth
INSTAGRAM ►   / romanoroth
FACEBOOK ►  / romanoroth
MEETUP ► https://www.meetup.com/de-DE/DevOps-M...
CONFERNCE ►https://www.devopsdays.ch/
HOMEPAGE ► https://www.romanoroth.com/

▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬
Software Testing    • Quality Assurance
Extreme Programing    • Playlist
Business Process Management    • Playlist

#DevSecOps #DevOps #GitLab #RomanoRoth