Application security testing (SAST) tools examine code to find software flaws and weaknesses, such as the OWASP Top 10, duplicate code, and hardcoded credentials. DAST tools do not need access to your applications source code/binary; they just need to be able to run the application. SAST tools can be used early on in the software development life cycle (SDLC) when the cost of fixing such issues is significantly reduced. SCA is a code-scavenger tool that focuses on the source code of your third-party and open-source components youre using to build your application.”]
Source: https://blog.shiftleft.io/sast-vs-dast-vs-sca-a-comparison-2d42cea6579f