Software Composition Analysis with Xray

Do you have Software Composition Analysis (SCA)? And if you do, is it mainstream? Or has no one noticed it? I'll answer these questions in my session about SCA, as well as how to detect secrets, and exposures while you're driving your precious CI process.