What is Dependency Scanning?

Dependency Scanning analyzes project dependency lockfiles (e.g., package-lock.json, go.sum) to match package versions against known vulnerability databases (like CVE databases), alerting if code imports libraries containing security issues.