From 44b36556a41f1a0b801f7b96b4809192e3d1d1bc Mon Sep 17 00:00:00 2001 From: Ryan Coulter Date: Wed, 14 May 2025 14:46:44 -0400 Subject: [PATCH 1/2] Remove rust --- layouts/partials/code_security/sca-getting-started.html | 1 - 1 file changed, 1 deletion(-) diff --git a/layouts/partials/code_security/sca-getting-started.html b/layouts/partials/code_security/sca-getting-started.html index 3910e76f8a684..cfbdd848986ca 100644 --- a/layouts/partials/code_security/sca-getting-started.html +++ b/layouts/partials/code_security/sca-getting-started.html @@ -5,7 +5,6 @@ (dict "name" "Java" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/java_avatar.svg" "width" "50") (dict "name" "CSharp" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/dotnet_avatar.svg" "width" "50") (dict "name" "Go" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/golang-avatar.png" "width" "60") - (dict "name" "Rust" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/rust.png" "width" "60") (dict "name" "Ruby" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/ruby_avatar.svg" "width" "45") (dict "name" "PHP" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/php_opcache.png" "width" "80") (dict "name" "Other" "href" "/security/code_security/software_composition_analysis/setup_static" "src" "integrations_logos/datadog_avatar.svg" "width" "50") From acbc9167a967d3fb8a1154fcc9447ed9dc5f45cf Mon Sep 17 00:00:00 2001 From: Ryan Coulter Date: Wed, 14 May 2025 16:40:45 -0400 Subject: [PATCH 2/2] Make langues a list --- .../software_composition_analysis/_index.md | 6 ++-- .../software_composition_analysis/_index.md | 6 ++-- .../code_security/sca-getting-started.html | 32 ------------------- 3 files changed, 4 insertions(+), 40 deletions(-) delete mode 100644 layouts/partials/code_security/sca-getting-started.html diff --git a/content/en/security/code_security/software_composition_analysis/_index.md b/content/en/security/code_security/software_composition_analysis/_index.md index f711eade9a836..1811a1dde7405 100644 --- a/content/en/security/code_security/software_composition_analysis/_index.md +++ b/content/en/security/code_security/software_composition_analysis/_index.md @@ -18,9 +18,7 @@ Using Software Composition Analysis provides organizations with the following be Datadog SCA uses a curated proprietary database. The database is sourced from Open Source Vulnerabilities (OSV), National Vulnerability Database (NVD), GitHub advisories, and other language ecosystem advisories, as well as Datadog's own Security Research team's findings. There is a maximum of 2 hours between when a new vulnerability is published and when it appears in Datadog, with emerging vulnerabilities typically appearing in Datadog within minutes. ## Set up Software Composition Analysis -The following languages and technologies are supported: - -{{< partial name="code_security/sca-getting-started.html" >}} +The following languages are supported: Python, JavaScript, Java, Csharp, Go, Ruby, PHP SCA supports both static and runtime dependency detection: - For static detection, you can scan via your CI/CD pipelines or directly via Datadog with hosted scanning (GitHub-only). Go to the [Code Security setup page][4] or see [static setup][1] to get started. @@ -66,7 +64,7 @@ The Libraries [Inventory][8] helps you understand the list of libraries and its SCA enriches the information Application Performance Monitoring (APM) is already collecting by flagging libraries that match with current vulnerability advisories. Potentially vulnerable services are highlighted directly in the **Security** view embedded in the [APM Software Catalog][10]. - Whether it is reaching end of life - Whether it is a malicious package -- The health of this library version based on its OpenSSF scorecard breakdown +- The health of this library version based on its OpenSSF scorecard breakdown - Software supply chain & Software Bill of Materials (SBOM) management