Changes for page Dependency-Track

Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31

From version 53.1

edited by Boris Folgmann
on 2025/09/03 14:13

Change comment: Uploaded new attachment "1756907509490-678.png", version {1}

To version 53.3

edited by Boris Folgmann
on 2025/09/03 14:15

Change comment: There is no comment for this version

Summary

Page properties

Content

@@ -57,9 +57,13 @@
  == Dependency-Track Jenkins Integration ==
--When using sdcPipeline(), Maven projects automatically generate a Software Bill of Materials (SBOM) and are pushed to Dependency-Track project. This process is fully automated through the provided pipeline library. Currently, this option is only available for Maven projects.
++The [[Jenkins Shared Library>>url:https://prd.sdc.t-systems.net/xwiki/wiki/devopsaas/view/Jenkins/Jenkins%20Shared%20Library/]] will automatically create SBOM (Software Bill of Materials) files for maven projects and upload them to Dependency-Track.
++[[image:1756907509490-678.png]]
++A new Dependency-Track sub project is automatically created on the fly. Currently, this option is only available for Maven projects.
++
++
  == Collection Project ==
  In Dependency-Track, these Maven builds are organized under a **Collection Project**. Subprojects (for example, individual modules of a Maven project) are created as children of the DevOps portal project. This makes it easier to see aggregated metrics, such as vulnerabilities and license compliance, without having to open each subproject individually.