Changes for page Dependency-Track
Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31
From version 26.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 09:16
on 2025/09/03 09:16
Change comment:
There is no comment for this version
To version 4.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 08:00
on 2025/09/03 08:00
Change comment:
Uploaded new attachment "Untitled33.png", version {1}
Summary
-
Page properties (1 modified, 0 added, 0 removed)
-
Attachments (0 modified, 0 added, 4 removed)
-
Objects (0 modified, 0 added, 1 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,114 +1,15 @@ 1 - {{toc/}}1 +[[https:~~/~~/docs.dependencytrack.org/>>https://docs.dependencytrack.org/]] 2 2 3 - [[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="GrafanaIcon LogoPNG vectorinSVG, PDF, AI, CDRformat"data-xwiki-image-style-alignment="end" height="52"width="190"]]3 +Optionales Tool: aktivieren als Project Admin für das Projekt, zuweisen von Lizenzen als Portal Admin an die entsprechenden User 4 4 5 -= Introduction = 6 - 7 -Dependency-Track is an open-source software composition analysis (SCA) tool. It creates and manages a software bill of materials (SBOM) for projects. The tool continuously checks dependencies for known vulnerabilities. It also tracks license compliance of open-source components. Teams gain visibility and control over their software supply chain. Helps integrate security into DevOps/CI-CD pipelines efficiently. 8 - 9 -[[Vendor Page>>https://dependencytrack.org/]] 10 - 11 -There are several useful resources available to get started with Deptrack: 12 - 13 -[[Dependency-Track Documentation>>https://docs.dependencytrack.org/]] 14 - 15 -[[Impact Analysis>>https://docs.dependencytrack.org/usage/impact-analysis/]] 16 - 17 -[[Collection-projects>>https://docs.dependencytrack.org/usage/collection-projects/]] 18 - 19 -= Accessing Dependency-Track = 20 - 21 -== Preconditions in DevOps portal to access Dependency-Track == 22 - 23 -1. A Dependency-Track license must be assigned to the user 24 -1. Dependency-Track must be added to the tool list of the project 25 - 26 -(% class="box warningmessage" %) 27 -((( 28 -⚠ **Note** 29 29 Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat 30 -))) 31 31 7 +Dashboard -> DepTrack Login Seite 32 32 9 +Pilotkunden Preview ist 33 33 34 - 35 -After completing the preconditions, a project in Dependency-Track, which is part of the DevOps-as-a-Service toolchain, can be accessed via the DevOps Portal or directly through a URL. 36 - 37 -== Via DevOps Portal == 38 - 39 -Go to the DevOps Portal Homepage and click on the link //Project// in the Project Vulnerabilities tile: 40 - 41 -[[image:deptrack.png||alt="Deptrack -Tile" data-xwiki-image-style-border="true" height="211" width="459"]] 42 - 43 -(% class="box warningmessage" %) 44 -((( 45 -⚠ **Note** 46 -If you are still unable to access your project in Dependency-Track, it may be because you are logged in with an old session that still uses outdated permissions or To resolve this issue, please log out and then log in again: 47 -\\[[image:login1.png||alt="Untitled2.png" height="250" width="600"]] 48 -))) 49 - 50 -== Via Direct URL == 51 - 52 -You can also access Dependency-Track directly using the following link format: 53 -[[https:~~/~~/deptrack-<customer~>.devops.t-systems.net/projects>>https://<customer>.devops.t-systems.net/xwiki/wiki/<pkey>/view]] where <customer> is the id of your DevOps-as-a-Service instance. 54 - 55 -If you are not already logged in to another tool in the toolchain or the DevOps portal, then you have to login using your configured SSO credentials. 56 - 57 - 58 - 59 -== Dependency-Track Jenkins Interaction == 60 - 61 61 Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch 62 62 13 +Collection Project und Unterprojekte 63 63 64 -= Users, Projects and Roles = 65 - 66 -* Projects, users and their roles in projects are managed in the DevOps Portal, the corresponding functions in Dependency-Track are disabled (UI and API) 67 - 68 -⚠ **Note** 69 -Projects in the DevOps portal are mapped to the corresponding subwikis in Dependency-Track. 70 - 71 -* When Dependency-Track is added as a tool to an existing or new project, a corresponding subwiki is automatically created. Users assigned to the project in the DevOps Portal are then added to the subwiki with the roles defined in the configuration : 72 -** Role mapping: ((( 73 -|=Project Role in DevOps Portal|=Permissions in XWiki 74 -|Admin| POLICY_VIOLATION_ANALYSIS,''VIEW_POLICY_VIOLATION,''VIEW_PORTFOLIO,'VIEW_VULNERABILITY,''VULNERABILITY_ANALYSIS' 75 -|Master|(% colspan="1" %)Can view, comment, and edit pages, but cannot delete content 76 -|Developer|(% colspan="1" %)Similar to Master 77 -|Viewer|Read-only access. Can only view content, no edits or comments allowed 78 - 79 -A detailed description of the XWiki role model can be found [[here>>https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/Permission%20types/]] 80 -))) 81 - 82 -= Main Features = 83 - 84 -Inside DevOps-as-a-Service, deptrack is mainly used for writing specifications and documentations. See below for a list of the main features of XWiki. 85 - 86 -== Collaborative Content Editing == 87 - 88 -* WYSIWYG and wiki syntax editors 89 -* Version control and history tracking 90 -* Inline and structured content editing 91 -* Commenting and annotations 92 - 93 -== Advanced Page & Document Management == 94 - 95 -* Hierarchical page structure (nested pages) 96 -* Templates for creating structured documents 97 -* Tags, categories, and metadata support 98 -* File attachments and preview 99 - 100 -== Powerful Search and Navigation == 101 - 102 -* Full-text search (Solr-based) 103 -* Faceted search filters 104 -* Page index, breadcrumbs, and navigation panels 105 - 106 -== Macros and Widgets == 107 - 108 -* Built-in and custom macros (charts, galleries, diagrams) 109 -* Embedding of rich media (videos, iframes, etc.) 110 -* Markdown and LaTeX support 111 - 112 - 113 - 114 114
- Untitled2.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom - Size
-
... ... @@ -1,1 +1,0 @@ 1 -13.5 KB - Content
- deptrack.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom - Size
-
... ... @@ -1,1 +1,0 @@ 1 -14.2 KB - Content
- login1.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom - Size
-
... ... @@ -1,1 +1,0 @@ 1 -25.5 KB - Content
- logo-dependency-track.YzQAjtqS_Z2pMQkR.webp
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom - Size
-
... ... @@ -1,1 +1,0 @@ 1 -7.1 KB - Content
- XWiki.XWikiComments[0]
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom - Comment
-
... ... @@ -1,13 +1,0 @@ 1 -[[https:~~/~~/docs.dependencytrack.org/>>url:https://docs.dependencytrack.org/]] 2 - 3 -Optionales Tool: aktivieren als Project Admin für das Projekt, zuweisen von Lizenzen als Portal Admin an die entsprechenden User 4 - 5 -Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat ~-~-> Done 6 - 7 -Dashboard -> DepTrack Login Seite ~-~-> DOne 8 - 9 -Pilotkunden Preview ist 10 - 11 -Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch 12 - 13 -Collection Project und Unterprojekte - Date
-
... ... @@ -1,1 +1,0 @@ 1 -2025-09-03 08:45:10.589