Does SonarQube's Deeper SAST includes SCA?

[ganncamp (G Ann Campbell)]

Hi,

We still don’t do SCA. That is, we’re not going to flag the libraries of open source projects for you. Instead, what we have done is analyze those libraries so that when you use them, our SAST analysis is more accurate.

 
HTH,
Ann