Setting Up Software Composition Analysis

Code Analysis is not available for the site.

Try the Beta!

Code Analysis is in public beta.

Overview

To use Datadog Software Composition Analysis (SCA) in CI, you only need to set it up in its own dedicated job.

Enable Software Composition Analysis

Navigate to Software Delivery > Code Analysis and click + Add a Repository. When setting up Code Analysis on your project, select Enable Software Composition Analysis.

Click the Enable Software Composition Analysis checkbox on the Code Analysis setup page when setting up Code Analysis for your project

Configure your CI/CD provider

Datadog Software Composition Analysis runs in your CI pipelines using the datadog-ci CLI and checks that imported libraries are secure. Configure your Datadog API and application keys and run Software Composition Analysis jobs in the respective CI provider.

See the documentation for information about the following integrations:


Further Reading

Additional helpful documentation, links, and articles:

Enhance application security in production with Datadog Application Vulnerability ManagementBLOG more more Getting Started with Software Composition AnalysisDOCUMENTATION more more Learn about Software Composition AnalysisDOCUMENTATION more more Learn about the Source Code IntegrationDOCUMENTATION more more Learn about Static AnalysisDOCUMENTATION more more