> For the complete documentation index, see [llms.txt](https://i3gis.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://i3gis.gitbook.io/docs/application-security/sca.md).

# SCA

Software Composition Analysis (SCA) is a process of identifying and managing the third-party open-source components that are included in a software application.

SCA is to ensure the security, legal compliance, and stability of software by analyzing the open-source components used and identifying any potential vulnerabilities, license compliance issues, and outdated components.