Overview

Sttor Code SCA (Software Composition Analysis) helps you understand and control the security risk coming from third-party and open-source dependencies used in your applications. It automatically discovers dependencies from your repositories (currently GitHub), detects vulnerable packages, and guides teams to safe upgrades—while keeping noise low and developer experience high.

SCA is Available in Both

• Pull Request scans (fast feedback before merge)
• Branch scans (full inventory + trends on main / long-lived branches)