SoftwareTestPilot

Advanced – Security Testing

Dependency Scanning (SCA) – ISTQB Definition

Last Updated: July 12, 2026 · SoftwareTestPilot QA Team

Official ISTQB Definition

The automated analysis of application dependencies to identify known security vulnerabilities.

In simple words

Scan your libraries for known CVEs, usually as part of CI.

Exam tip

Also called Software Composition Analysis (SCA).

Related terms

Practice this term in the ISTQB Mock Test

40 CTFL v4.0 questions, 60-minute timer, instant scoring and chapter-wise breakdown.

Practice in Mock Test