# OpenText Fortify SCA Documentation

## OpenText Fortify SCA Documentation

- [OpenText Fortify Software Composition Analysis (SCA) Documentation](https://docs.debricked.com/readme.md): Explore our capabilities, integrations, API, and use-cases to elevate your open-source journey.
- [Getting started](https://docs.debricked.com/overview/getting-started.md): This section is your gateway to getting started with OpenText Fortify Software Composition Analysis (Fortify SCA).
- [Create a Fortify SCA account](https://docs.debricked.com/overview/getting-started/create-a-debricked-account.md): Create your OpenText Fortify Software Composition Analysis account effortlessly. Follow this simple guide to set up your account quickly.
- [Running Fortify SCA](https://docs.debricked.com/overview/getting-started/running-debricked.md): Learn about all the different ways of using OpenText Fortify Software Composition Analysis.
- [Help](https://docs.debricked.com/overview/help.md): Here are the various ways to receive additional assistance while using OpenText Fortify Software Composition Analysis.
- [Frequently asked questions (FAQ)](https://docs.debricked.com/overview/help/frequently-asked-questions-faq.md): Browse our FAQ section for detailed answers to common questions about using OpenText Fortify Software Composition Analysis.
- [Upgrade your account](https://docs.debricked.com/overview/help/upgrade-your-account.md): Enhance your OpenText Fortify Software Composition Analysis experience by learning how to upgrade your account.
- [Get help in Fortify SCA](https://docs.debricked.com/overview/help/get-help-in-the-debricked-tool.md): Here are the different ways of getting more help while using OpenText Fortify Software Composition Analysis.
- [Language support](https://docs.debricked.com/overview/language-support.md): See the full list of the languages and package managers currently supported by OpenText Fortify Software Composition Analysis.
- [C# - Nuget, Paket](https://docs.debricked.com/overview/language-support/c-nuget-paket.md): See a breakdown of the file formats and features supported in C#.
- [CycloneDX SBOM](https://docs.debricked.com/overview/language-support/cyclonedx-sbom.md): This section provides a breakdown of the file formats and features supported in CycloneDX SBOM.
- [Go - Go Modules, Go Dep, Bazel](https://docs.debricked.com/overview/language-support/go-go-modules-go-dep-bazel.md): This section provides a breakdown of the file formats and features supported in Go.
- [Java & Kotlin - Gradle, Maven, Bazel](https://docs.debricked.com/overview/language-support/java-and-kotlin-gradle-maven-bazel.md): This section provides a breakdown of the file formats and features supported in Java/Kotlin.
- [JavaScript - NPM, Yarn, Bower, pnpm](https://docs.debricked.com/overview/language-support/javascript-npm-yarn-bower.md): See a breakdown of the file formats and features supported in JavaScript.
- [Objective-C - CocoaPods](https://docs.debricked.com/overview/language-support/objective-c-cocoapods.md): See a breakdown of the file formats and features supported in Objective-C.
- [PHP - Composer](https://docs.debricked.com/overview/language-support/php-composer.md): See a breakdown of the file formats and features supported in PHP.
- [Python - Pip, Pipenv, UV, poetry](https://docs.debricked.com/overview/language-support/python-pip-pipenv.md): See a breakdown of the file formats and features supported in Python.
- [Ruby - RubyGems](https://docs.debricked.com/overview/language-support/ruby-rubygems.md): See a breakdown of the file formats and features supported in Ruby.
- [Rust - Cargo](https://docs.debricked.com/overview/language-support/rust-cargo.md): See a breakdown of the file formats and features supported in Rust.
- [Swift - CocoaPods](https://docs.debricked.com/overview/language-support/swift-cocoapods.md): See a breakdown of the file formats and features supported in Swift.
- [Linux package managers](https://docs.debricked.com/overview/language-support/linux-package-managers.md): See a breakdown of the file formats and features supported in Linux.
- [Scala - SBT](https://docs.debricked.com/overview/language-support/scala-sbt.md): This page provides a detailed overview of the file formats and features that Scala supports.
- [Security overview](https://docs.debricked.com/overview/security-overview.md)
- [Vulnerability management](https://docs.debricked.com/product/vulnerability-management.md): This area covers how to manage open-source vulnerabilities in your application.
- [Security terms](https://docs.debricked.com/product/vulnerability-management/security-terms.md): A glossary of common security terms used in the Fortify SCA tool.
- [Data sources](https://docs.debricked.com/product/vulnerability-management/data-sources.md): Explore this section to discover the trusted sources of data.
- [See your data](https://docs.debricked.com/product/vulnerability-management/see-your-data.md): Learn how to find detailed information about your projects.
- [Pull Requests (PR)](https://docs.debricked.com/product/vulnerability-management/pull-requests.md): Learn about the types of Pull Requests (PR) OpenText Fortify Software Composition Analysis supports and the actions triggered when PRs are generated.
- [Enable Pull Request support](https://docs.debricked.com/product/vulnerability-management/pull-requests/enable-pull-request-support.md): Learn how to enable Pull Request support.
- [Solve vulnerabilities using Pull Requests (PR)](https://docs.debricked.com/product/vulnerability-management/pull-requests/solve-vulnerabilities-using-pull-requests-pr.md): OpenText Fortify Software Composition Analysis offers several solutions to tackle open-source vulnerabilities. Learn how to do it using Pull Requests (PR).
- [Solve vulnerabilities using Pull Requests (PR) via API](https://docs.debricked.com/product/vulnerability-management/pull-requests/solve-vulnerabilities-using-pull-requests-pr-via-the-api.md): Learn how to use Pull Requests (PR) via the API.
- [Set a review status](https://docs.debricked.com/product/vulnerability-management/set-a-review-status.md): Learn how to set a review status for vulnerabilities you’ve been notified about.
- [Snooze or pause a review status](https://docs.debricked.com/product/vulnerability-management/set-a-review-status/snooze-or-pause-a-review-status.md): Learn how to snooze or pause a vulnerability you’ve been notified about.
- [Reachability Analysis](https://docs.debricked.com/product/vulnerability-management/reachability-analysis.md): Here's everything you need to know about OpenText Fortify Software Composition Analysis Reachability Analysis.
- [Set up Reachability Analysis for Java](https://docs.debricked.com/product/vulnerability-management/reachability-analysis/set-up-reachability-analysis.md): Learn how to set up Reachability Analysis for Java.
- [Set up Reachability Analysis for Go](https://docs.debricked.com/product/vulnerability-management/reachability-analysis/set-up-reachability-analysis-for-go.md): Learn how to set up Reachability Analysis for Go.
- [Solve vulnerabilities manually with root fixes](https://docs.debricked.com/product/vulnerability-management/solve-vulnerabilities-manually-with-root-fixes.md): Root Fixes enable you to manually solve vulnerabilities.
- [License risk management](https://docs.debricked.com/product/license-risk-management.md): Master the art of managing open source licenses with OpenText Fortify Software Composition Analysis.
- [Licence families](https://docs.debricked.com/product/license-risk-management/licence-families.md): Understand how OpenText Fortify Software Composition Analysis defines different open-source license families.
- [License risks](https://docs.debricked.com/product/license-risk-management/license-risks.md): See the different levels of open-source license risks.
- [Set up a use case](https://docs.debricked.com/product/license-risk-management/set-up-a-use-case.md): Learn how to set up a use case for your repositories.
- [Set up a use case using API](https://docs.debricked.com/product/license-risk-management/set-up-a-use-case/set-up-a-use-case-using-the-api.md): Learn how to set up a use case for your repositories using the API.
- [Proxy non-standard license identifiers](https://docs.debricked.com/product/license-risk-management/proxying-non-standard-license-identifiers.md): Learn how OpenText Fortify Software Composition Analysis deals with non-standard and deprecated licenses.
- [Malicious package detection](https://docs.debricked.com/product/malicious-package-detection.md): Detect and avoid malware
- [Project health](https://docs.debricked.com/product/project-health.md): Learn more about Project Health - what it is and what the different metrics mean.
- [Contributors](https://docs.debricked.com/product/project-health/contributors.md): See how we define the Contributors metric in Project Health.
- [Popularity](https://docs.debricked.com/product/project-health/popularity.md): See how we define the Popularity metric in Project Health.
- [Security](https://docs.debricked.com/product/project-health/security.md): See how we define the Security metric in Project Health.
- [Open source select](https://docs.debricked.com/product/open-source-select.md): Learn how to use the Fortify SCA Open Source Select to choose the right open source project from the get-go and make the most of our metrics.
- [Search projects](https://docs.debricked.com/product/open-source-select/search-for-projects.md): Learn how to search for an open source project using OpenText Fortify Software Composition Analysis Open Source Select.
- [Compare projects](https://docs.debricked.com/product/open-source-select/compare-projects.md): Learn how to compare open source projects using OpenText Fortify Software Composition Analysis Open Source Select.
- [View more details](https://docs.debricked.com/product/open-source-select/see-more-details.md): Learn how to see more details about a project in OpenText Fortify Software Composition Analysis Open Source Select.
- [Start left policies](https://docs.debricked.com/product/open-source-select/start-left-policies.md): Why start over when you can Start Left?
- [Fortify SCA Select Browser Extension](https://docs.debricked.com/product/open-source-select/debricked-select-browser-extension.md): Learn how to install and use the OpenText Fortify Software Composition Analysis Select Browser Extension.
- [End of Life (EOL)](https://docs.debricked.com/product/open-source-select/end-of-life-eol.md): Learn about the End of Life (EOL) information in Open Source Select.
- [Automation](https://docs.debricked.com/product/automation.md): Navigate one of OpenText Fortify Software Composition Analysis’s most powerful features - the Automation engine.
- [Create an automation rule](https://docs.debricked.com/product/automation/create-an-automation-rule.md): Learn how to create an automation rule for your repositories.
- [Edit an automation rule](https://docs.debricked.com/product/automation/edit-an-automation-rule.md): Learn how to edit, disable, or delete your automation rules.
- [Default automation rules](https://docs.debricked.com/product/automation/default-automation-rules.md): Find default automation rules already in place and learn how to customize or remove them.
- [Set up webhooks](https://docs.debricked.com/product/automation/set-up-webhooks.md): Learn how to set up and configure a webhook.
- [Allow and deny lists for dependencies](https://docs.debricked.com/product/automation/allow-and-deny-lists-for-dependencies.md): Allow and deny lists
- [Create and manage dependency allow and deny lists](https://docs.debricked.com/product/automation/allow-and-deny-lists-for-dependencies/create-and-manage-dependency-allow-and-deny-lists.md): Create and manage lists
- [Policies](https://docs.debricked.com/product/automation/policies.md): Learn how to group your automation rules into policies for a single point of control.
- [Monitoring](https://docs.debricked.com/product/automation/monitoring.md): Learn how to monitor vulnerabilities in repositories that are not updated regularly.
- [Data exports and SBOMs](https://docs.debricked.com/product/exporting-sbom.md): Discover the different ways of exporting data with OpenText Fortify Software Composition Analysis.
- [Overview](https://docs.debricked.com/product/exporting-sbom/overview.md): Explore the data and snapshots you can find on the Overview page in the tool.
- [License export](https://docs.debricked.com/product/exporting-sbom/license-export.md): Learn how to create a License Export.
- [Vulnerability export](https://docs.debricked.com/product/exporting-sbom/vulnerability-export.md): Learn how to create a Vulnerability Export.
- [SBOM export](https://docs.debricked.com/product/exporting-sbom/sbom-export.md): Learn about SBOM export reports.
- [CycloneDX SBOM export](https://docs.debricked.com/product/exporting-sbom/sbom-export/cyclonedx-sbom-export.md): Learn how to create a CycloneDX SBOM Export.
- [SPDX SBOM export](https://docs.debricked.com/product/exporting-sbom/sbom-export/spdx-sbom-export.md): Learn how to create a SPDX SBOM Export.
- [SCA summary export (PDF)](https://docs.debricked.com/product/exporting-sbom/sca-summary-export-pdf.md): Learn how to generate executive PDF reports from Global View.
- [Administration](https://docs.debricked.com/product/administration.md): Here's everything an admin needs to know, from team onboarding to setting up Fortify SCA for a smooth workflow.
- [Generate access token](https://docs.debricked.com/product/administration/generate-access-token.md): Learn how to generate an access token.
- [Account](https://docs.debricked.com/product/administration/account.md): Learn how to manage your account with Fortify SCA.
- [Change your password](https://docs.debricked.com/product/administration/account/change-your-password.md): See how to change your password.
- [Delete your account](https://docs.debricked.com/product/administration/account/delete-your-account.md): See how to delete your Fortify SCA account.
- [Delete company account](https://docs.debricked.com/product/administration/account/delete-the-company-account.md): See how to delete your Fortify SCA account.
- [Billing](https://docs.debricked.com/product/administration/billing.md): Learn about billing at Fortify SCA.
- [Manage contributing developers](https://docs.debricked.com/product/administration/billing/manage-contributing-developers.md): Learn how to edit the number of contributing developers on your team.
- [Manage billing frequency](https://docs.debricked.com/product/administration/billing/manage-billing-frequency.md): Learn how to edit your billing frequency.
- [Manage payment methods](https://docs.debricked.com/product/administration/billing/manage-payment-methods.md): Learn how to manage your payment methods.
- [Access invoices](https://docs.debricked.com/product/administration/billing/access-invoices.md): See how to access your invoices.
- [Manage your subscription](https://docs.debricked.com/product/administration/billing/manage-your-subscription.md): Learn how to manage your Fortify SCA subscription.
- [Settings](https://docs.debricked.com/product/administration/settings.md): Explore Settings at Fortify SCA.
- [Enable and disable snoozing vulnerabilities](https://docs.debricked.com/product/administration/settings/enable-and-disable-snoozing-vulnerabilities.md): Learn how to enable or disable snoozing vulnerabilities.
- [Supported language for Fortify SCA tool](https://docs.debricked.com/product/administration/settings/app-language.md): See how to change the app language.
- [View logged events](https://docs.debricked.com/product/administration/settings/see-logged-events.md): Learn about the events logged at Fortify SCA and how to view all of them.
- [Two-Factor Authentication (2FA)](https://docs.debricked.com/product/administration/settings/two-factor-authentication-2fa.md): Learn how to enable or disable two-factor authentication.
- [Users](https://docs.debricked.com/product/administration/users.md): Learn about ways of managing users with Fortify SCA.
- [User roles (freemium and premium)](https://docs.debricked.com/product/administration/users/user-roles-freemium-and-premium.md): Understand the distinct functions and permissions of each user role.
- [Role-Based Access Control (Enterprise)](https://docs.debricked.com/product/administration/users/role-based-access-control-enterprise.md): Understand the distinct functions and permissions of each user role available through Fortify SCA's Role-Based Access Control.
- [Manage users](https://docs.debricked.com/product/administration/users/manage-users.md): See how to manage a user account.
- [Add a new user](https://docs.debricked.com/product/administration/users/manage-users/add-a-new-user.md): Learn how to add new users to your company account.
- [Repositories](https://docs.debricked.com/product/administration/repositories.md): See how to manage your repositories.
- [Default Branch](https://docs.debricked.com/product/administration/repositories/default-branch.md): See how Fortify SCA identifies the default branch of your projects.
- [Repository groups](https://docs.debricked.com/product/administration/repositories/repository-groups.md): Learn how to group your repositories integrated with Fortify SCA.
- [Manually upload a dependency file](https://docs.debricked.com/product/administration/repositories/upload-a-dependency-file-manually.md): Learn how to upload a dependency file manually.
- [Manage your commits](https://docs.debricked.com/product/administration/repositories/manage-your-commits.md): Learn how to manage commits in your repositories.
- [Export table data](https://docs.debricked.com/product/administration/repositories/export-table-data.md): Learn how to export repository table data.
- [Command Line Interface (CLI)](https://docs.debricked.com/tools-and-integrations/cli.md): Learn all about our Command Line Interface, which enables you to run vulnerability scans on your local machine and integrate Fortify SCA into your pipeline.
- [Fortify SCA CLI](https://docs.debricked.com/tools-and-integrations/cli/debricked-cli.md): Learn all about our Command Line Interface, which enables you to run vulnerability scans on your local machine and integrate OpenText Fortify Software Composition Analysis into your pipeline.
- [High performance scans](https://docs.debricked.com/tools-and-integrations/cli/debricked-cli/high-performance-scans.md)
- [File fingerprinting](https://docs.debricked.com/tools-and-integrations/cli/debricked-cli/file-fingerprinting.md): Learn about Fortify SCA's fingerprint analysis and how to set it up.
- [Legacy CLI](https://docs.debricked.com/tools-and-integrations/cli/legacy-cli.md)
- [CI/CD integrations](https://docs.debricked.com/tools-and-integrations/integrations.md): See the list of available CI or CD integrations and step-by-step tutorials for integrating Fortify SCA with your favorite tools.
- [GitHub](https://docs.debricked.com/tools-and-integrations/integrations/github.md): Learn how to integrate Fortify SCA with Github.
- [CircleCI](https://docs.debricked.com/tools-and-integrations/integrations/circleci.md): Learn how to integrate Fortify SCA with CircleCI.
- [BuildKite](https://docs.debricked.com/tools-and-integrations/integrations/buildkite.md): Learn how to integrate Fortify SCA with BuildKite.
- [GitLab](https://docs.debricked.com/tools-and-integrations/integrations/gitlab.md): Learn how to integrate Fortify SCA with GitLab.
- [Bitbucket](https://docs.debricked.com/tools-and-integrations/integrations/bitbucket.md): Learn how to integrate Fortify SCA with Bitbucket.
- [Azure DevOps](https://docs.debricked.com/tools-and-integrations/integrations/azure-devops.md): Learn how to integrate Fortify SCA with Azure DevOps.
- [Argo workflows](https://docs.debricked.com/tools-and-integrations/integrations/argo-workflows.md): Learn how to integrate Fortify SCA with Argo Workflows.
- [Travis CI](https://docs.debricked.com/tools-and-integrations/integrations/travis-ci.md): Learn how to integrate Fortify SCA with Travis CI.
- [Jenkins](https://docs.debricked.com/tools-and-integrations/integrations/jenkins.md): Learn how to integrate Fortify SCA with Jenkins.
- [Bamboo](https://docs.debricked.com/tools-and-integrations/integrations/bamboo.md): Learn how to integrate OpenText Fortify Software Composition Analysis with Bamboo.
- [TeamCity](https://docs.debricked.com/tools-and-integrations/integrations/teamcity.md): Learn how to integrate Fortify SCA with TeamCity.
- [Fortify on Demand (FoD)](https://docs.debricked.com/tools-and-integrations/fortify-on-demand-fod.md): Learn how to use Fortify SCA through Fortify on Demand.
- [Fortify Software Security Center (SSC)](https://docs.debricked.com/tools-and-integrations/fortify-software-security-center-ssc.md): Learn how to integrate Fortify SCA into Fortify SSC.
- [Fortify SCA APIs](https://docs.debricked.com/tools-and-integrations/debricked-apis.md): Expand your use of OpenText Fortify Software Composition Analysis with the help of APIs.
- [Open source select API](https://docs.debricked.com/tools-and-integrations/debricked-apis/open-source-select-api.md)
- [Integrated Development Environments (IDEs)](https://docs.debricked.com/tools-and-integrations/ides.md): Learn how to use OpenText Fortify Software Composition Analysis in your dev environment.
- [Single Sign-On (SSO)](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through an Identity Provider of your choice.
- [Single Sign-On (SSO) through Okta (OIDC)](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-okta.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through Okta.
- [Single Sign-On (SSO) through Microsoft Entra ID (OIDC)](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-microsoft-entra-id.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through Microsoft Entra ID.
- [Single Sign-On (SSO) through JumpCloud OIDC](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-jumpcloud-oidc.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through JumpCloud OIDC.
- [Single Sign-On (SSO) through Github (OIDC)](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-github.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through GitHub.
- [Single Sign-On (SSO) through Okta (SAML)](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-okta-saml.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through Okta.
- [Single Sign-On (SSO) through OneLogin (SAML)](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-onelogin-saml.md): Learn how to set up Single Sign-On (SSO) with Fortify SCA through OneLogin.
- [Fortify SCA CLI migration guide](https://docs.debricked.com/tips-and-tricks/debricked-cli-migration-guide.md): Learn why you should migrate to the new CLI and what actions are needed from your side.
- [Workarounds](https://docs.debricked.com/tips-and-tricks/workarounds.md): Check out some of the workarounds that help you use Fortify SCA!
- [Scanning Conan (C++) projects](https://docs.debricked.com/tips-and-tricks/workarounds/scanning-conan-c++-projects.md): Learn how to scan Conan (C++) projects with Fortify SCA.
- [Scanning a repository with different services](https://docs.debricked.com/tips-and-tricks/workarounds/scanning-a-repository-with-different-services.md): Learn how to scan a repository using different services.
- [Scanning Docker images](https://docs.debricked.com/tips-and-tricks/workarounds/scanning-docker-images.md): Learn how to scan Docker images with Fortify SCA.
- [Automations: Do not fail on found CVE lacking a fix](https://docs.debricked.com/tips-and-tricks/workarounds/automations-do-not-fail-on-found-cve-lacking-a-fix.md)
- [Configuring user access using API](https://docs.debricked.com/tips-and-tricks/workarounds/configuring-user-access-using-api.md): Learn how to configure user access using API.
- [Blogs](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs.md): See the full list of the blogs for Fortify SCA.
- [Copyright and open-source licenses part1: what is copyright?](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/copyright-and-open-source-licenses-part1-what-is-copyright.md): Learn about Fortify SCA copyrights and open-source licenses.
- [OSS licenses part 2: inside open- source software license page](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/oss-licenses-part-2-inside-open-source-software-license-page.md): Learn about OSS licenses.
- [OSS licenses part 3: permissive licenses](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/oss-licenses-part-3-permissive-licenses.md): Learn about permissive licenses.
- [OSS licenses part 4: strong copyleft licenses](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/oss-licenses-part-4-strong-copyleft-licenses.md): Learn about strong copyleft licenses.
- [OSS licenses part 5: Weak copyleft licenses](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/oss-licenses-part-5-weak-copyleft-licenses.md): Learn about weak copyleft licenses.
- [OSS licenses part 6: license compatibility and dual licensing](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/oss-licenses-part-6-license-compatibility-and-dual-licensing.md): Learn about license compatibility and dual licensing.
- [OSS licenses part 7: other licenses](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/oss-licenses-part-7-other-licenses.md): Learn about other licenses.
- [CVSS precedence in NVD and Fortify SCA](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/cvss-precedence-in-nvd-and-fortify-sca.md): Learn about CVSS precedence in NVD and Fortify SCA.
- [The Software Bill of Materials, part 1: benefitting from the SBOM](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/the-software-bill-of-materials-part-1-benefitting-from-the-sbom.md): Learn about the benefits of SBOM.
- [The Software Bill of Materials, part 2: drivers, motivators, and challenges](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/the-software-bill-of-materials-part-2-drivers-motivators-and-challenges.md): Learn about the SBOM drivers, motivators, and challenges for the usage.
- [The Software Bill of Materials, part 3: SBOM file](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/the-software-bill-of-materials-part-3-sbom-file.md): Learn about the few different formats for storing and encoding SBOM information.
- [The Software Bill of Materials, part 4: SBOM with Fortify SCA](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/the-software-bill-of-materials-part-4-sbom-with-fortify-sca.md): Learn about some of the possibilities to create and scan SBOM files with Fortify SCA.
- [Software supply chain attacks, part 1: defining and understanding the attack](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/software-supply-chain-attacks-part-1-defining-and-understanding-the-attack.md): Learn more about software supply chain attacks.
- [Software supply chain attacks, part 2: open-source software](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/software-supply-chain-attacks-part-2-open-source-software.md): Learn more about the open-source ecosystem and its role in the attacks.
- [Software supply chain attacks, part 3: role of software composition analysis](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/software-supply-chain-attacks-part-3-role-of-software-composition-analysis.md): Learn more about software composition analysis and its role in protecting software from these kinds of attacks.
- [Software supply chain attacks, part 4: initiatives to support mitigations](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/software-supply-chain-attacks-part-4-initiatives-to-support-mitigations.md): Learn more about some emerging initiatives that can help support mitigations.
- [What is a security vulnerability?: security vulnerability definition](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/what-is-a-security-vulnerability-security-vulnerability-definition.md): Learn more about security vulnerabilities.
- [Comply with SBOM requirements of the new Cybersecurity Executive Order](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/comply-with-sbom-requirements-of-the-new-cybersecurity-executive-order.md): Learn more on how to comply with the SBOM requirements of the new Cybersecurity Executive Order.
- [Why shift left when you can start left?: introducing start left policies](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/why-shift-left-when-you-can-start-left-introducing-start-left-policies.md): learn more about the start left policies.
- [What is open-source health?](https://docs.debricked.com/opentext-fortify-sca-blogs/blogs/what-is-open-source-health.md): Learn more about open-source health.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://docs.debricked.com/readme.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.