From 95b4e735523fa56677f57c5b64a08d22a6b4cec1 Mon Sep 17 00:00:00 2001 From: ayela232 Date: Mon, 27 Jul 2026 17:11:57 -0400 Subject: [PATCH 1/4] Update prerequisites for runtime detection setup Rearranged prerequisites for runtime detection setup and added clarification about APM and Infrastructure Monitoring requirements. Added context about pricing as well --- .../software_composition_analysis/setup_runtime/_index.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md index 76640456d87..dd210352601 100644 --- a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md +++ b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md @@ -10,8 +10,9 @@ SCA can detect vulnerabilities that affect open source libraries running in your Before setting up runtime detection, ensure the following prerequisites are met: 1. **Datadog Agent Installation:** The Datadog Agent is installed and configured for your application's operating system or container, cloud, or virtual environment. -2. **Datadog APM Configuration:** Datadog APM is configured for your application or service, and web traces (`type:web`) are being received by Datadog. -3. **Supported SDK:** The Datadog SDK used by your application or service supports Software Composition Analysis capabilities for the language of your application or service. For more details, refer to the [Library Compatibility][2] page. +2. **Supported SDK:** The Datadog SDK used by your application or service supports Software Composition Analysis capabilities for the language of your application or service. For more details, refer to the [Library Compatibility][2] page. + +
The Datadog Agent and SDK are the only requirements for SCA. APM tracing and Infrastructure Monitoring are not required; SCA reports findings independently of both. To disable APM or Infrastructure Monitoring, see Disable APM and Infrastructure Monitoring. If APM is disabled, expect some APM intake costs to support SCA features (for example, security traces and spans).
## Software Composition Analysis enablement types @@ -150,3 +151,4 @@ Datadog stores findings in accordance with our [Data Retention Periods](https:// [1]: /security/code_security/software_composition_analysis/setup_runtime/compatibility/java [2]: /security/code_security/software_composition_analysis/setup_runtime/compatibility/ [3]: https://app.datadoghq.com/security/configuration/code-security/setup + From 563476acfe40a497386a1c17722cb3f76a6abde1 Mon Sep 17 00:00:00 2001 From: ayela232 Date: Mon, 27 Jul 2026 17:28:19 -0400 Subject: [PATCH 2/4] Update content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md Co-authored-by: DeForest Richards <56796055+drichards-87@users.noreply.github.com> --- .../software_composition_analysis/setup_runtime/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md index dd210352601..d31a2dfc967 100644 --- a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md +++ b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md @@ -12,7 +12,7 @@ Before setting up runtime detection, ensure the following prerequisites are met: 1. **Datadog Agent Installation:** The Datadog Agent is installed and configured for your application's operating system or container, cloud, or virtual environment. 2. **Supported SDK:** The Datadog SDK used by your application or service supports Software Composition Analysis capabilities for the language of your application or service. For more details, refer to the [Library Compatibility][2] page. -
The Datadog Agent and SDK are the only requirements for SCA. APM tracing and Infrastructure Monitoring are not required; SCA reports findings independently of both. To disable APM or Infrastructure Monitoring, see Disable APM and Infrastructure Monitoring. If APM is disabled, expect some APM intake costs to support SCA features (for example, security traces and spans).
+
The Datadog Agent and SDK are the only requirements for SCA. APM tracing and Infrastructure Monitoring are not required, and SCA reports findings independently of both. To disable APM or Infrastructure Monitoring, see Disable APM and Infrastructure Monitoring. If APM is disabled, SCA may still generate some APM intake costs for data that supports SCA features, such as security traces and spans.
## Software Composition Analysis enablement types From 36acbbd41782d9282069714de5052ae3e63b8740 Mon Sep 17 00:00:00 2001 From: ayela232 Date: Mon, 27 Jul 2026 17:28:39 -0400 Subject: [PATCH 3/4] Update content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md Co-authored-by: DeForest Richards <56796055+drichards-87@users.noreply.github.com> --- .../software_composition_analysis/setup_runtime/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md index d31a2dfc967..8037d3e6406 100644 --- a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md +++ b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md @@ -10,7 +10,7 @@ SCA can detect vulnerabilities that affect open source libraries running in your Before setting up runtime detection, ensure the following prerequisites are met: 1. **Datadog Agent Installation:** The Datadog Agent is installed and configured for your application's operating system or container, cloud, or virtual environment. -2. **Supported SDK:** The Datadog SDK used by your application or service supports Software Composition Analysis capabilities for the language of your application or service. For more details, refer to the [Library Compatibility][2] page. +2. **Supported SDK:** The Datadog SDK used by your application or service must support Software Composition Analysis for your application's language. For more information, see the [Library Compatibility][2] page.
The Datadog Agent and SDK are the only requirements for SCA. APM tracing and Infrastructure Monitoring are not required, and SCA reports findings independently of both. To disable APM or Infrastructure Monitoring, see Disable APM and Infrastructure Monitoring. If APM is disabled, SCA may still generate some APM intake costs for data that supports SCA features, such as security traces and spans.
From c88b28a73b2c69c5a4728f8bba3c672bf0a1fb52 Mon Sep 17 00:00:00 2001 From: ayela232 Date: Wed, 29 Jul 2026 16:53:14 -0400 Subject: [PATCH 4/4] Update SCA requirements in setup_runtime documentation Removed reference to disabling APM and Infrastructure Monitoring from the requirements for SCA. --- .../software_composition_analysis/setup_runtime/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md index 8037d3e6406..f864c5a0b68 100644 --- a/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md +++ b/hugo/content/en/security/code_security/software_composition_analysis/setup_runtime/_index.md @@ -12,7 +12,7 @@ Before setting up runtime detection, ensure the following prerequisites are met: 1. **Datadog Agent Installation:** The Datadog Agent is installed and configured for your application's operating system or container, cloud, or virtual environment. 2. **Supported SDK:** The Datadog SDK used by your application or service must support Software Composition Analysis for your application's language. For more information, see the [Library Compatibility][2] page. -
The Datadog Agent and SDK are the only requirements for SCA. APM tracing and Infrastructure Monitoring are not required, and SCA reports findings independently of both. To disable APM or Infrastructure Monitoring, see Disable APM and Infrastructure Monitoring. If APM is disabled, SCA may still generate some APM intake costs for data that supports SCA features, such as security traces and spans.
+
The Datadog Agent and SDK are the only requirements for SCA. APM tracing and Infrastructure Monitoring are not required, and SCA reports findings independently of both. If APM is disabled, SCA may still generate some APM intake costs for data that supports SCA features, such as security traces and spans.
## Software Composition Analysis enablement types