Skip to Content

Changes for page Dependency-Track

Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31
From version 32.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 12:53
Change comment: There is no comment for this version
To version 4.1
edited by Milad Afshar-Jahanshahi
on 2025/09/03 08:00
Change comment: Uploaded new attachment "Untitled33.png", version {1}

Summary

Details

Page properties
Content
... ... @@ -1,130 +1,15 @@
1 -STILL UNDER CONSTRUCTION
1 +[[https:~~/~~/docs.dependencytrack.org/>>https://docs.dependencytrack.org/]]
2 2  
3 -[[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="Grafana Icon Logo PNG vector in SVG, PDF, AI, CDR format" data-xwiki-image-style-alignment="end" height="52" width="190"]]
3 +Optionales Tool: aktivieren als Project Admin für das Projekt, zuweisen von Lizenzen als Portal Admin an die entsprechenden User
4 4  
5 -{{toc/}}
6 -
7 -= Introduction =
8 -
9 -Dependency-Track is an open-source Software Composition Analysis (SCA) tool that helps organizations manage and secure their software supply chain. It automatically generates and maintains a Software Bill of Materials (SBOM) for projects, continuously monitoring dependencies for known vulnerabilities. In addition, it tracks license compliance of open-source components, giving teams greater visibility and control. By integrating seamlessly into DevOps and CI/CD pipelines, Dependency-Track makes it easier to embed security throughout the development lifecycle.
10 -
11 -[[Vendor Page>>https://dependencytrack.org/]]
12 -
13 -There are several useful resources available to get started with Deptrack:
14 -
15 -[[Dependency-Track Documentation>>https://docs.dependencytrack.org/]]
16 -
17 -[[Impact Analysis>>https://docs.dependencytrack.org/usage/impact-analysis/]]
18 -
19 -[[Collection-projects>>https://docs.dependencytrack.org/usage/collection-projects/]]
20 -
21 -= Accessing Dependency-Track =
22 -
23 -
24 -Dependency-Track is integrated into the DOSSS toolchain, but for now it’s only offered in the Pilotkunden Preview. To get started, a few prerequisites need to be in place.
25 -
26 -
27 -== Preconditions in DevOps portal to access Dependency-Track ==
28 -
29 -1. A Dependency-Track license must be assigned to the user
30 -1. Dependency-Track must be added to the tool list of the project
31 -
32 -(% class="box warningmessage" %)
33 -(((
34 -⚠ **Note**
35 35  Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat
36 -)))
37 37  
7 +Dashboard -> DepTrack Login Seite
38 38  
9 +Pilotkunden Preview ist
39 39  
40 -
41 -
42 -
43 -
44 -
45 -
46 -
47 -After completing the preconditions, a project in Dependency-Track, which is part of the DevOps-as-a-Service toolchain, can be accessed via the DevOps Portal or directly through a URL.
48 -
49 -== Via DevOps Portal ==
50 -
51 -Go to the DevOps Portal Homepage and click on the link //Project// in the Project Vulnerabilities tile:
52 -
53 -[[image:deptrack.png||alt="Deptrack -Tile" data-xwiki-image-style-border="true" height="211" width="459"]]
54 -
55 -(% class="box warningmessage" %)
56 -(((
57 -⚠ **Note**
58 -If you are still unable to access your project in Dependency-Track, it may be because you are logged in with an old session that still uses outdated permissions or To resolve this issue, please log out and then log in again:
59 -\\[[image:login1.png||alt="Untitled2.png" height="250" width="600"]]
60 -)))
61 -
62 -== Via Direct URL ==
63 -
64 -You can also access Dependency-Track directly using the following link format:
65 -[[https:~~/~~/deptrack-<customer~>.devops.t-systems.net/projects>>https://<customer>.devops.t-systems.net/xwiki/wiki/<pkey>/view]] where <customer> is the id of your DevOps-as-a-Service instance.
66 -
67 -If you are not already logged in to another tool in the toolchain or the DevOps portal, then you have to login using your configured SSO credentials.
68 -
69 -
70 -
71 -== Dependency-Track Jenkins Interaction ==
72 -
73 73  Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch
74 74  
13 +Collection Project und Unterprojekte
75 75  
76 -== Collection Project und Unterprojekte ==
77 -
78 -TODO
79 -
80 -= Users, Projects and Roles =
81 -
82 -* Projects, users and their roles in projects are managed in the DevOps Portal, the corresponding functions in Dependency-Track are disabled (UI and API)
83 -
84 -⚠ **Note**
85 -Projects in the DevOps portal are mapped to the corresponding subwikis in Dependency-Track.
86 -
87 -* When Dependency-Track is added as a tool to an existing or new project, a corresponding subwiki is automatically created. Users assigned to the project in the DevOps Portal are then added to the subwiki with the roles defined in the configuration : 
88 -** Role mapping: (((
89 -|=Project Role in DevOps Portal|=Permissions in XWiki
90 -|Admin| POLICY_VIOLATION_ANALYSIS,''VIEW_POLICY_VIOLATION,''VIEW_PORTFOLIO,'VIEW_VULNERABILITY,''VULNERABILITY_ANALYSIS'
91 -|Master|(% colspan="1" %)Can view, comment, and edit pages, but cannot delete content
92 -|Developer|(% colspan="1" %)Similar to Master
93 -|Viewer|Read-only access. Can only view content, no edits or comments allowed
94 -
95 -A detailed description of the XWiki role model can be found [[here>>https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/Permission%20types/]]
96 -)))
97 -
98 -= Main Features =
99 -
100 -Inside DevOps-as-a-Service, deptrack is mainly used for writing specifications and documentations. See below for a list of the main features of XWiki.
101 -
102 -== Collaborative Content Editing ==
103 -
104 -* WYSIWYG and wiki syntax editors
105 -* Version control and history tracking
106 -* Inline and structured content editing
107 -* Commenting and annotations
108 -
109 -== Advanced Page & Document Management ==
110 -
111 -* Hierarchical page structure (nested pages)
112 -* Templates for creating structured documents
113 -* Tags, categories, and metadata support
114 -* File attachments and preview
115 -
116 -== Powerful Search and Navigation ==
117 -
118 -* Full-text search (Solr-based)
119 -* Faceted search filters
120 -* Page index, breadcrumbs, and navigation panels
121 -
122 -== Macros and Widgets ==
123 -
124 -* Built-in and custom macros (charts, galleries, diagrams)
125 -* Embedding of rich media (videos, iframes, etc.)
126 -* Markdown and LaTeX support
127 -
128 -
129 -
130 130  
Untitled2.png
Author
... ... @@ -1,1 +1,0 @@
1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,1 +1,0 @@
1 -13.5 KB
Content
deptrack.png
Author
... ... @@ -1,1 +1,0 @@
1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,1 +1,0 @@
1 -14.2 KB
Content
login1.png
Author
... ... @@ -1,1 +1,0 @@
1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,1 +1,0 @@
1 -25.5 KB
Content
logo-dependency-track.YzQAjtqS_Z2pMQkR.webp
Author
... ... @@ -1,1 +1,0 @@
1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom
Size
... ... @@ -1,1 +1,0 @@
1 -7.1 KB
Content
XWiki.XWikiComments[0]
Author
... ... @@ -1,1 +1,0 @@
1 -xwiki:XWiki.miladafshar-jahanshahit-systemscom
Comment
... ... @@ -1,13 +1,0 @@
1 -[[https:~~/~~/docs.dependencytrack.org/>>url:https://docs.dependencytrack.org/]]
2 -
3 -Optionales Tool: aktivieren als Project Admin für das Projekt, zuweisen von Lizenzen als Portal Admin an die entsprechenden User
4 -
5 -Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat  ~-~-> Done
6 -
7 -Dashboard -> DepTrack Login Seite  ~-~-> DOne
8 -
9 -Pilotkunden Preview ist
10 -
11 -Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch
12 -
13 -Collection Project und Unterprojekte
Date
... ... @@ -1,1 +1,0 @@
1 -2025-09-03 08:45:10.589
© 2018-2025 T-Systems International GmbH