Changes for page Dependency-Track
Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31
From version 29.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 09:26
on 2025/09/03 09:26
Change comment:
There is no comment for this version
To version 32.2
edited by Milad Afshar-Jahanshahi
on 2025/09/03 12:54
on 2025/09/03 12:54
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,3 +1,5 @@ 1 +STILL UNDER CONSTRUCTION 2 + 1 1 [[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="Grafana Icon Logo PNG vector in SVG, PDF, AI, CDR format" data-xwiki-image-style-alignment="end" height="52" width="190"]] 2 2 3 3 {{toc/}} ... ... @@ -4,7 +4,7 @@ 4 4 5 5 = Introduction = 6 6 7 -Dependency-Track is an open-source softwarecompositionanalysis (SCA) tool. It creates and manages asoftwarebill ofmaterials (SBOM) for projects.The toolcontinuouslychecksdependencies for known vulnerabilities. Italso tracks license compliance of open-source components.Teams gainvisibility and controlover their software supplychain. Helps integratesecurity into DevOps/CI-CD pipelines efficiently.9 +Dependency-Track is an open-source Software Composition Analysis (SCA) tool that helps organizations manage and secure their software supply chain. It automatically generates and maintains a Software Bill of Materials (SBOM) for projects, continuously monitoring dependencies for known vulnerabilities. In addition, it tracks license compliance of open-source components, giving teams greater visibility and control. By integrating seamlessly into DevOps and CI/CD pipelines, Dependency-Track makes it easier to embed security throughout the development lifecycle. 8 8 9 9 [[Vendor Page>>https://dependencytrack.org/]] 10 10 ... ... @@ -18,10 +18,7 @@ 18 18 19 19 = Accessing Dependency-Track = 20 20 21 -(% class="box warningmessage" %) 22 -((( 23 -Pilotkunden Preview ist 24 -))) 23 +Dependency-Track is integrated into the DOAAS toolchain, but for now it’s only offered in the Pilotkunden Preview. To get started, a few prerequisites need to be in place. 25 25 26 26 == Preconditions in DevOps portal to access Dependency-Track == 27 27 ... ... @@ -31,7 +31,7 @@ 31 31 (% class="box warningmessage" %) 32 32 ((( 33 33 ⚠ **Note** 34 - Im Gegensatzzu anderenToolsist ein Loginnurdannmöglich,wennderUsereineLizenzhat und inmindestenseinemDepTrackProjekteine Rolle hat33 +Unlike other tools, login is only possible if the user has a valid license and is assigned a role in at least one Dependency-Track project. 35 35 ))) 36 36 37 37 ... ... @@ -40,6 +40,10 @@ 40 40 41 41 42 42 42 + 43 + 44 + 45 + 43 43 After completing the preconditions, a project in Dependency-Track, which is part of the DevOps-as-a-Service toolchain, can be accessed via the DevOps Portal or directly through a URL. 44 44 45 45 == Via DevOps Portal ==