Skip to Content

Changes for page Dependency-Track

Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31
From version 1.1
edited by Boris Folgmann
on 2025/09/03 07:16
Change comment: There is no comment for this version
To version 30.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 09:26
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -xwiki:XWiki.borisfolgmannt-systemscom
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Content
... ... @@ -1,5 +1,129 @@
1 -[[https:~~/~~/docs.dependencytrack.org/>>https://docs.dependencytrack.org/]]
1 +STILL UNDER CONSTRUCTION
2 2  
3 -Optionales Tool: aktivieren als Project Admin für das Projekt, zuweisen von Lizenzen als Portal Admin an die entsprechenden User
3 +[[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="Grafana Icon Logo PNG vector in SVG, PDF, AI, CDR format" data-xwiki-image-style-alignment="end" height="52" width="190"]]
4 4  
5 -Im Gegensatz zu anderen Tools ist ein Login nur
5 +{{toc/}}
6 +
7 += Introduction =
8 +
9 +Dependency-Track is an open-source software composition analysis (SCA) tool. It creates and manages a software bill of materials (SBOM) for projects. The tool continuously checks dependencies for known vulnerabilities. It also tracks license compliance of open-source components. Teams gain visibility and control over their software supply chain. Helps integrate security into DevOps/CI-CD pipelines efficiently.
10 +
11 +[[Vendor Page>>https://dependencytrack.org/]]
12 +
13 +There are several useful resources available to get started with Deptrack:
14 +
15 +[[Dependency-Track Documentation>>https://docs.dependencytrack.org/]]
16 +
17 +[[Impact Analysis>>https://docs.dependencytrack.org/usage/impact-analysis/]]
18 +
19 +[[Collection-projects>>https://docs.dependencytrack.org/usage/collection-projects/]]
20 +
21 += Accessing Dependency-Track =
22 +
23 +(% class="box warningmessage" %)
24 +(((
25 +Pilotkunden Preview ist
26 +)))
27 +
28 +== Preconditions in DevOps portal to access Dependency-Track ==
29 +
30 +1. A Dependency-Track license must be assigned to the user
31 +1. Dependency-Track must be added to the tool list of the project
32 +
33 +(% class="box warningmessage" %)
34 +(((
35 +⚠ **Note**
36 +Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat
37 +)))
38 +
39 +
40 +
41 +
42 +
43 +
44 +
45 +
46 +After completing the preconditions, a project in Dependency-Track, which is part of the DevOps-as-a-Service toolchain, can be accessed via the DevOps Portal or directly through a URL.
47 +
48 +== Via DevOps Portal ==
49 +
50 +Go to the DevOps Portal Homepage and click on the link //Project// in the Project Vulnerabilities tile:
51 +
52 +[[image:deptrack.png||alt="Deptrack -Tile" data-xwiki-image-style-border="true" height="211" width="459"]]
53 +
54 +(% class="box warningmessage" %)
55 +(((
56 +⚠ **Note**
57 +If you are still unable to access your project in Dependency-Track, it may be because you are logged in with an old session that still uses outdated permissions or To resolve this issue, please log out and then log in again:
58 +\\[[image:login1.png||alt="Untitled2.png" height="250" width="600"]]
59 +)))
60 +
61 +== Via Direct URL ==
62 +
63 +You can also access Dependency-Track directly using the following link format:
64 +[[https:~~/~~/deptrack-<customer~>.devops.t-systems.net/projects>>https://<customer>.devops.t-systems.net/xwiki/wiki/<pkey>/view]] where <customer> is the id of your DevOps-as-a-Service instance.
65 +
66 +If you are not already logged in to another tool in the toolchain or the DevOps portal, then you have to login using your configured SSO credentials.
67 +
68 +
69 +
70 +== Dependency-Track Jenkins Interaction ==
71 +
72 +Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch
73 +
74 +
75 +== Collection Project und Unterprojekte ==
76 +
77 +TODO
78 +
79 += Users, Projects and Roles =
80 +
81 +* Projects, users and their roles in projects are managed in the DevOps Portal, the corresponding functions in Dependency-Track are disabled (UI and API)
82 +
83 +⚠ **Note**
84 +Projects in the DevOps portal are mapped to the corresponding subwikis in Dependency-Track.
85 +
86 +* When Dependency-Track is added as a tool to an existing or new project, a corresponding subwiki is automatically created. Users assigned to the project in the DevOps Portal are then added to the subwiki with the roles defined in the configuration : 
87 +** Role mapping: (((
88 +|=Project Role in DevOps Portal|=Permissions in XWiki
89 +|Admin| POLICY_VIOLATION_ANALYSIS,''VIEW_POLICY_VIOLATION,''VIEW_PORTFOLIO,'VIEW_VULNERABILITY,''VULNERABILITY_ANALYSIS'
90 +|Master|(% colspan="1" %)Can view, comment, and edit pages, but cannot delete content
91 +|Developer|(% colspan="1" %)Similar to Master
92 +|Viewer|Read-only access. Can only view content, no edits or comments allowed
93 +
94 +A detailed description of the XWiki role model can be found [[here>>https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/Permission%20types/]]
95 +)))
96 +
97 += Main Features =
98 +
99 +Inside DevOps-as-a-Service, deptrack is mainly used for writing specifications and documentations. See below for a list of the main features of XWiki.
100 +
101 +== Collaborative Content Editing ==
102 +
103 +* WYSIWYG and wiki syntax editors
104 +* Version control and history tracking
105 +* Inline and structured content editing
106 +* Commenting and annotations
107 +
108 +== Advanced Page & Document Management ==
109 +
110 +* Hierarchical page structure (nested pages)
111 +* Templates for creating structured documents
112 +* Tags, categories, and metadata support
113 +* File attachments and preview
114 +
115 +== Powerful Search and Navigation ==
116 +
117 +* Full-text search (Solr-based)
118 +* Faceted search filters
119 +* Page index, breadcrumbs, and navigation panels
120 +
121 +== Macros and Widgets ==
122 +
123 +* Built-in and custom macros (charts, galleries, diagrams)
124 +* Embedding of rich media (videos, iframes, etc.)
125 +* Markdown and LaTeX support
126 +
127 +
128 +
129 +
Untitled2.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +13.5 KB
Content
Untitled33.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +16.3 KB
Content
XWiki-logo-color.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +4.9 KB
Content
deptrack.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +14.2 KB
Content
login1.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +25.5 KB
Content
logo-dependency-track.YzQAjtqS_Z2pMQkR.webp
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +7.1 KB
Content
XWiki.XWikiComments[0]
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.miladafshar-jahanshahit-systemscom
Comment
... ... @@ -1,0 +1,13 @@
1 +[[https:~~/~~/docs.dependencytrack.org/>>url:https://docs.dependencytrack.org/]]
2 +
3 +Optionales Tool: aktivieren als Project Admin für das Projekt, zuweisen von Lizenzen als Portal Admin an die entsprechenden User
4 +
5 +Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat  ~-~-> Done
6 +
7 +Dashboard -> DepTrack Login Seite  ~-~-> DOne
8 +
9 +Pilotkunden Preview ist
10 +
11 +Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch
12 +
13 +Collection Project und Unterprojekte
Date
... ... @@ -1,0 +1,1 @@
1 +2025-09-03 08:45:10.589
© 2018-2025 T-Systems International GmbH