Skip to Content

Changes for page Dependency-Track

Last modified by Milad Afshar-Jahanshahi on 2025/09/03 14:31
From version 53.2
edited by Boris Folgmann
on 2025/09/03 14:13
Change comment: There is no comment for this version
To version 53.4
edited by Boris Folgmann
on 2025/09/03 14:16
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -55,19 +55,23 @@
55 55  
56 56  After creating a DevOps project in the portal, a Dependency-Track project is automatically created.
57 57  
58 -== Dependency-Track Jenkins Integration ==
58 +== Collection Project ==
59 59  
60 -The [[Jenkins Shared Library>>url:https://prd.sdc.t-systems.net/xwiki/wiki/devopsaas/view/Jenkins/Jenkins%20Shared%20Library/]] will automatically create SBOM files for maven projects and upload them to Dependency-Track.
60 +In Dependency-Track, these Maven builds are organized under a **Collection Project**. Subprojects (for example, individual modules of a Maven project) are created as children of the DevOps portal project. This makes it easier to see aggregated metrics, such as vulnerabilities and license compliance, without having to open each subproject individually.
61 +For more details, see the [[Collection Projects>>https://docs.dependencytrack.org/usage/collection-projects/]] section in the Dependency-Track documentation.
61 61  
63 +== Integration with Jenkins ==
64 +
65 +The [[Jenkins Shared Library>>url:https://prd.sdc.t-systems.net/xwiki/wiki/devopsaas/view/Jenkins/Jenkins%20Shared%20Library/]] will automatically create SBOM (Software Bill of Materials) files for maven projects and upload them to Dependency-Track.
66 +
62 62  [[image:1756907509490-678.png]]
63 63  
64 -When using sdcPipeline(), Maven projects automatically generate a Software Bill of Materials (SBOM) and push them to a Dependency-Track sub project. This process is fully automated through the provided pipeline library. Currently, this option is only available for Maven projects.
69 +A new Dependency-Track sub project is automatically created on the fly.
65 65  
71 +Currently, this option is only available for Maven projects.
66 66  
67 -== Collection Project ==
68 68  
69 -In Dependency-Track, these Maven builds are organized under a **Collection Project**. Subprojects (for example, individual modules of a Maven project) are created as children of the DevOps portal project. This makes it easier to see aggregated metrics, such as vulnerabilities and license compliance, without having to open each subproject individually.
70 -For more details, see the [[Collection Projects>>https://docs.dependencytrack.org/usage/collection-projects/]] section in the Dependency-Track documentation.
74 +== ==
71 71  
72 72  = Users and Roles =
73 73  
© 2018-2025 T-Systems International GmbH