Update Code Security SCA Page by gorkavicente · Pull Request #35113 · DataDog/documentation

gorkavicente · 2026-03-09T17:40:24Z

This PR updates the Software Composition Analysis (SCA) documentation to make the product model and UI views easier to understand.

Changes:

Adds a How it works section that explains Static SCA (repo scans) vs Runtime SCA (APM) and how advisory ingestion impacts results.
Reorganizes content into Key capabilities with clearer user workflows (prioritize vulnerabilities, view by repository, PR Gates, library inventory, APM context).
Adds Understanding SCA views to explain the difference between Repositories Explorer (commit-scoped snapshot) and Vulnerabilities Explorer (continuously matched), including an example.
Documents retroactive advisory matching so customers understand why new CVEs can appear without rerunning scans.
Keeps existing setup and language support references and updates “Next steps” accordingly.

What does this PR do? What is the motivation?

Merge instructions

Merge readiness:

Ready for merge

For Datadog employees:

Your branch name MUST follow the <name>/<description> convention and include the forward slash (/). Without this format, your pull request will not pass CI, the GitLab pipeline will not run, and you won't get a branch preview. Getting a branch preview makes it easier for us to check any issues with your PR, such as broken links.

If your branch doesn't follow this format, rename it or create a new branch and PR.

[6/5/2025] Merge queue has been disabled on the documentation repo. If you have write access to the repo, the PR has been reviewed by a Documentation team member, and all of the required checks have passed, you can use the Squash and Merge button to merge the PR. If you don't have write access, or you need help, reach out in the #documentation channel in Slack.

Additional notes

This PR updates the Software Composition Analysis (SCA) documentation to make the product model and UI views easier to understand. Changes: 1. Adds a How it works section that explains Static SCA (repo scans) vs Runtime SCA (APM) and how advisory ingestion impacts results. 2. Reorganizes content into Key capabilities with clearer user workflows (prioritize vulnerabilities, view by repository, PR Gates, library inventory, APM context). 3. Adds Understanding SCA views to explain the difference between Repositories Explorer (commit-scoped snapshot) and Vulnerabilities Explorer (continuously matched), including an example. 4. Documents retroactive advisory matching so customers understand why new CVEs can appear without rerunning scans. 5. Keeps existing setup and language support references and updates “Next steps” accordingly.

github-actions · 2026-03-09T17:44:33Z

Preview links (active after the `build_preview` check completes)

Modified Files

Copilot

Pull request overview

Updates the Software Composition Analysis (SCA) documentation page to better explain SCA’s detection model (static vs runtime), reorganize workflows into clearer “key capabilities”, and clarify how results differ across SCA UI views.

Changes:

Added a “How it works” section describing Static SCA vs Runtime SCA and advisory ingestion behavior.
Reorganized the page into “Key capabilities” (vulnerability prioritization, repo views, PR Gates, inventory, APM context).
Added “Understanding SCA views” explaining Repositories Explorer vs Vulnerabilities Explorer, plus retroactive advisory matching.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

content/en/security/code_security/software_composition_analysis/_index.md

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

cswatt · 2026-03-09T20:04:29Z

Added DOCS-13624 to track review

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

content/en/security/code_security/software_composition_analysis/_index.md

…s/_index.md

Applied some minor improvements suggested by Copilot.

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

content/en/security/code_security/software_composition_analysis/_index.md

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

content/en/security/code_security/software_composition_analysis/_index.md

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Applied Copilot suggestions.

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

content/en/security/code_security/software_composition_analysis/_index.md

content/en/security/code_security/software_composition_analysis/setup_static/_index.md

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

content/en/security/code_security/software_composition_analysis/setup_static/_index.md

content/en/security/code_security/software_composition_analysis/_index.md

…s/setup_static/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

gorkavicente requested a review from a team as a code owner March 9, 2026 17:40

gorkavicente requested a review from Copilot March 9, 2026 17:40

Copilot started reviewing on behalf of gorkavicente March 9, 2026 17:42 View session

Copilot AI reviewed Mar 9, 2026

View reviewed changes

gorkavicente and others added 4 commits March 9, 2026 18:46

Update content/en/security/code_security/software_composition_analysi…

4f6cdbe

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update content/en/security/code_security/software_composition_analysi…

95c6800

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update content/en/security/code_security/software_composition_analysi…

32ecde7

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update content/en/security/code_security/software_composition_analysi…

8354b7d

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

cswatt added the editorial review Waiting on a more in-depth review label Mar 9, 2026

gorkavicente requested a review from Copilot March 10, 2026 09:52

Copilot started reviewing on behalf of gorkavicente March 10, 2026 09:53 View session

Copilot AI reviewed Mar 10, 2026

View reviewed changes

gorkavicente commented Mar 10, 2026

View reviewed changes

content/en/security/code_security/software_composition_analysis/_index.md Outdated Show resolved Hide resolved

gorkavicente added 2 commits March 10, 2026 11:14

Update content/en/security/code_security/software_composition_analysi…

74bf11d

…s/_index.md

Update _index.md

b57c651

Applied some minor improvements suggested by Copilot.

gorkavicente requested a review from Copilot March 10, 2026 10:21

Copilot started reviewing on behalf of gorkavicente March 10, 2026 10:23 View session

Copilot AI reviewed Mar 10, 2026

View reviewed changes

Update content/en/security/code_security/software_composition_analysi…

508974b

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

gorkavicente requested a review from Copilot March 10, 2026 10:28

Copilot started reviewing on behalf of gorkavicente March 10, 2026 10:30 View session

Copilot AI reviewed Mar 10, 2026

View reviewed changes

gorkavicente and others added 4 commits March 10, 2026 11:37

Update content/en/security/code_security/software_composition_analysi…

4c32f1c

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update content/en/security/code_security/software_composition_analysi…

3c21f47

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update _index.md

c286375

Applied Copilot suggestions.

Update _index.md

c53f287

gorkavicente requested a review from Copilot March 10, 2026 11:07

Copilot started reviewing on behalf of gorkavicente March 10, 2026 11:09 View session

Copilot AI reviewed Mar 10, 2026

View reviewed changes

gorkavicente requested a review from Copilot March 10, 2026 11:24

Merge branch 'master' into gorkavicente/code-security-sca

b8ce49a

Copilot started reviewing on behalf of gorkavicente March 10, 2026 11:29 View session

Copilot AI reviewed Mar 10, 2026

View reviewed changes

gorkavicente and others added 3 commits March 10, 2026 12:30

Update content/en/security/code_security/software_composition_analysi…

93684ae

…s/setup_static/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update content/en/security/code_security/software_composition_analysi…

f8b6812

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update content/en/security/code_security/software_composition_analysi…

2574669

…s/_index.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

gorkavicente requested a review from Copilot March 10, 2026 11:36

Copilot started reviewing on behalf of gorkavicente March 10, 2026 11:37 View session

Update _index.md

aeee376

Copilot AI reviewed Mar 10, 2026

View reviewed changes

Conversation

gorkavicente commented Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What does this PR do? What is the motivation?

Merge instructions

Additional notes

Uh oh!

github-actions bot commented Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Preview links (active after the build_preview check completes)

Modified Files

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

cswatt commented Mar 9, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

gorkavicente commented Mar 9, 2026 •

edited

Loading

github-actions bot commented Mar 9, 2026 •

edited

Loading

Preview links (active after the `build_preview` check completes)