dependency-scanning CI/CD Catalog