KOREA
eGISEC
S071
Secure Coding, Application Security, Cyber Security - Others
Sparrow SCA is a software composition analysis (SCA) tool designed to secure the software supply chain. It identifies open-source software licenses and detects security vulnerabilities. By generating SBOMs in formats like CycloneDX, SPDX, and NIS-SBOM, it enables visibility into the components that make up a software application. This comprehensive analysis, which covers source code, binaries, dependency files, and container images, supports the identification and remediation of software vulnerabilities. Additionally, by identifying the licenses of used open-source software and providing vulnerability information, Sparrow SCA helps to ensure the reliability of software.