Changes for page Dependency-Track

Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31

From version 31.2
edited by Milad Afshar-Jahanshahi
on 2025/09/03 12:51
Change comment: There is no comment for this version
To version 26.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 09:16
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -1,12 +1,10 @@
1 -STILL UNDER CONSTRUCTION
1 +{{toc/}}
2 2  
3 3  [[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="Grafana Icon Logo PNG vector in SVG, PDF, AI, CDR format" data-xwiki-image-style-alignment="end" height="52" width="190"]]
4 4  
5 -{{toc/}}
6 -
7 7  = Introduction =
8 8  
9 -Dependency-Track is an open-source Software Composition Analysis (SCA) tool that helps organizations manage and secure their software supply chain. It automatically generates and maintains a Software Bill of Materials (SBOM) for projects, continuously monitoring dependencies for known vulnerabilities. In addition, it tracks license compliance of open-source components, giving teams greater visibility and control. By integrating seamlessly into DevOps and CI/CD pipelines, Dependency-Track makes it easier to embed security throughout the development lifecycle.
7 +Dependency-Track is an open-source software composition analysis (SCA) tool. It creates and manages a software bill of materials (SBOM) for projects. The tool continuously checks dependencies for known vulnerabilities. It also tracks license compliance of open-source components. Teams gain visibility and control over their software supply chain. Helps integrate security into DevOps/CI-CD pipelines efficiently.
10 10  
11 11  [[Vendor Page>>https://dependencytrack.org/]]
12 12  
... ... @@ -20,11 +20,6 @@
20 20  
21 21  = Accessing Dependency-Track =
22 22  
23 -(% class="box warningmessage" %)
24 -(((
25 -In our toolchain, Dependency-Track is currently available only for Pilotkunden Preview.
26 -)))
27 -
28 28  == Preconditions in DevOps portal to access Dependency-Track ==
29 29  
30 30  1. A Dependency-Track license must be assigned to the user
... ... @@ -39,12 +39,6 @@
39 39  
40 40  
41 41  
42 -
43 -
44 -
45 -
46 -
47 -
48 48  After completing the preconditions, a project in Dependency-Track, which is part of the DevOps-as-a-Service toolchain, can be accessed via the DevOps Portal or directly through a URL.
49 49  
50 50  == Via DevOps Portal ==
... ... @@ -74,10 +74,6 @@
74 74  Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch
75 75  
76 76  
77 -== Collection Project und Unterprojekte ==
78 -
79 -TODO
80 -
81 81  = Users, Projects and Roles =
82 82  
83 83  * Projects, users and their roles in projects are managed in the DevOps Portal, the corresponding functions in Dependency-Track are disabled (UI and API)