# Open Source Libraries Scan (SCA) {% embed url="" %} ### Starting Scan We can start an online scan by clicking on the **SCAN** button on top right

We choose Github for this example. Once clicked get a repo to scan. For the demonstration purpose we take **Vulnado.**

We clone the repo and paste it like,

Hit the green plus sign and scan

Scan with start

Once online scans finishes we get the result like following

Above picture shows that we scanned a project names “vulnado-test” which has our pom.xml (SCA JAVA) and other scans. Let’s dive into that. Once you click on it you will be redirected to a page like following

Which will contain the following information about your SAST scan ``` 1) Project Scanned ``` Named of our current project. In this case vulnado-test ``` 2) Scan Date ``` When scan was performed on which date and at what time ``` 3) User’s Email ``` Which user performed this scan, we show their email address ``` 4) RuleId ``` Which rule matched our sets of backend rules. We show that ``` 5) Vulnerable Depedency ``` Vulnerable dependencies with exact verion ``` 6)Description of CVE ``` More information about the vulnerability that dependency have ``` 7) Patch ``` How to fix that issue ``` 8) Filter Severity - To filter your results based upon the criticality ``` Once sca scan is done, we can patch the vulnerable dependencies directly from UI if Source Control (Github/ Gitlab/ Bitbucket) is configured and you know that repo. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.clouddefenseai.com/scans/open-source-libraries-scan-sca.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.