Tools/Snyk
Snyk
Security scanner covering two distinct checks: SCA (Software Composition Analysis — known CVEs in open-source dependencies, e.g. an outdated npm/pip package) and SAST (Static Application Security Testing — vulnerability patterns in first-party code, e.g. injection risks). Complements AQUA (container image scanning) and SonarQube (code quality rather than security) in a full pipeline scan stack, usually gated in GitHub_Actions.