OWASP dependency-check is open-source and can be used to scan Java and .NET applications via the CLI or using plugins.
Read articles Continuous Security with OWASP Dependency Check and Integrating OWASP Dependency Check with Jenkins to CI/CD.
Ranked in these QuestionsQuestion Ranking
Pro Jenkins plugin
Pro Azure DevOps Extension
An Azure DevOps Extension is available on the Visual Studio Marketplace.
Con Needs Java
Needs Java to be installed.
Con No TeamCity plugin
There is no official TeamCity plugin, but there seems to be an unofficial tool: PacMon.