Changes for page Dependency-Track
Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31
From version 43.2
edited by Milad Afshar-Jahanshahi
on 2025/09/03 13:30
on 2025/09/03 13:30
Change comment:
There is no comment for this version
To version 40.5
edited by Milad Afshar-Jahanshahi
on 2025/09/03 13:23
on 2025/09/03 13:23
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,3 +1,5 @@ 1 +STILL UNDER CONSTRUCTION 2 + 1 1 [[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="Grafana Icon Logo PNG vector in SVG, PDF, AI, CDR format" data-xwiki-image-style-alignment="end" height="52" width="190"]] 2 2 3 3 {{toc/}} ... ... @@ -4,17 +4,19 @@ 4 4 5 5 = Introduction = 6 6 7 -Dependency Track is an open-source Software Composition Analysis (SCA) tool that helps organizations manage and secure their software supply chain. It automatically generates and maintains a Software Bill of Materials (SBOM) for projects, continuously monitoring dependencies for known vulnerabilities. In addition, it tracks license compliance of open-source components, giving teams greater visibility and control. By integrating seamlessly into DevOps and CI/CD pipelines, Dependency-Track makes it easier to embed security throughout the development lifecycle.9 +Dependency-Track is an open-source Software Composition Analysis (SCA) tool that helps organizations manage and secure their software supply chain. It automatically generates and maintains a Software Bill of Materials (SBOM) for projects, continuously monitoring dependencies for known vulnerabilities. In addition, it tracks license compliance of open-source components, giving teams greater visibility and control. By integrating seamlessly into DevOps and CI/CD pipelines, Dependency-Track makes it easier to embed security throughout the development lifecycle. 8 8 9 9 [[Vendor Page>>https://dependencytrack.org/]] 10 10 11 -There are several useful resources available to get started with Dep endency Track:13 +There are several useful resources available to get started with Deptrack: 12 12 13 13 [[Dependency-Track Documentation>>https://docs.dependencytrack.org/]] 14 14 17 +[[Impact Analysis>>https://docs.dependencytrack.org/usage/impact-analysis/]] 18 + 15 15 = Accessing Dependency-Track = 16 16 17 -Dependency Track is integrated into the DevOps-as-a-Service toolchain, but for now it’s only offered in the Pilotkunden Preview. To get started, a few prerequisites need to be in place.21 +Dependency-Track is integrated into the DevOps-as-a-Service toolchain, but for now it’s only offered in the Pilotkunden Preview. To get started, a few prerequisites need to be in place. 18 18 19 19 == Preconditions in DevOps portal to access Dependency-Track == 20 20 ... ... @@ -91,7 +91,7 @@ 91 91 Dependency‑Track offers a robust auditing workflow: you can triage findings on individual projects, add comments, and record analysis decisions. The platform logs a complete audit trail for each action. Users with the VULNERABILITY_ANALYSIS permission can perform these audits, and audit histories are visible to anyone with the VIEW_VULNERABILITY permission. 92 92 93 93 (% class="wikigeneratedid" %) 94 -You can explore the [[Auditing Basics>>https://docs.dependencytrack.org/triage/auditing-basics/]]section in the Dependency‑Track documentation for deeper insights.98 +You can explore the Auditing Basics section in the Dependency‑Track documentation for deeper insights. 95 95 96 96 == Impact Analysis == 97 97 ... ... @@ -99,7 +99,7 @@ 99 99 Dependency‑Track enables organizations to assess how a vulnerability affects their environment. If a vulnerability is published in a supported datasource (e.g., NVD, GitHub Advisories, OSS Index, VulnDB), the platform dynamically identifies all affected projects. This allows you to answer: "What is affected?" and "Where am I affected?" at a glance. 100 100 101 101 (% class="wikigeneratedid" %) 102 -You can explore the [[Impact Analysis>>https://docs.dependencytrack.org/usage/impact-analysis/]]section in the Dependency‑Track documentation for deeper insights.106 +You can explore the Impact Analysis section in the Dependency‑Track documentation for deeper insights. 103 103 104 104 == Analysis States == 105 105