Low Severity
Published: Oct 30, 2026
Vexa Software Composition Analysis (vexa-sca) is its commercial-grade, blazingly fast Software Composition Analysis & Security Engine.
# Vexa SCA: Enterprise-Grade Software Composition Analysis & Security Engine
[](https://github.com/noviqtechnologies/vexa-sca/releases)
[](https://github.com/noviqtechnologies/vexa-sca/actions)
[](#automated-tests--verification)
[](LICENSE)
[](https://www.rust-lang.org/)
[](#cross-platform-installation--setup)
[](SECURITY.md#software-supply-chain--artifact-integrity)
[](#5-software-bill-of-materials-sbom-cyclonedx--spdx)
[](#7-cicd-quality-gates--policy-enforcement)
[](SECURITY.md)
<a href="https://vexasec.io" target="_blank" rel="noopener noreferrer"><img src="https://img.shields.io/badge/Website-vexasec.io-blue" alt="Website" /></a>
**Vexa SCA** (`vexa-sca`) is an open-source, high-performance Software Composition Analysis (SCA) engine built in Rust. Engineered specifically for enterprise DevSecOps pipelines and modern pull-request automation, Vexa SCA delivers ultra-fast, reproducible vulnerability triage, deep transitive dependency graphing, positive-proof verdict integrity, and authoritative CI result surfaces.
> [!IMPORTANT]
> **Release Status: General Availability (GA) — Release v1.2.0**
> - **Tier 1 (G