Wiki source code of Dependency Track
Version 29.1 by Milad Afshar-Jahanshahi on 2025/09/03 09:26
Show last authors
| author | version | line-number | content |
|---|---|---|---|
| 1 | [[image:logo-dependency-track.YzQAjtqS_Z2pMQkR.webp||alt="Grafana Icon Logo PNG vector in SVG, PDF, AI, CDR format" data-xwiki-image-style-alignment="end" height="52" width="190"]] | ||
| 2 | |||
| 3 | {{toc/}} | ||
| 4 | |||
| 5 | = Introduction = | ||
| 6 | |||
| 7 | Dependency-Track is an open-source software composition analysis (SCA) tool. It creates and manages a software bill of materials (SBOM) for projects. The tool continuously checks dependencies for known vulnerabilities. It also tracks license compliance of open-source components. Teams gain visibility and control over their software supply chain. Helps integrate security into DevOps/CI-CD pipelines efficiently. | ||
| 8 | |||
| 9 | [[Vendor Page>>https://dependencytrack.org/]] | ||
| 10 | |||
| 11 | There are several useful resources available to get started with Deptrack: | ||
| 12 | |||
| 13 | [[Dependency-Track Documentation>>https://docs.dependencytrack.org/]] | ||
| 14 | |||
| 15 | [[Impact Analysis>>https://docs.dependencytrack.org/usage/impact-analysis/]] | ||
| 16 | |||
| 17 | [[Collection-projects>>https://docs.dependencytrack.org/usage/collection-projects/]] | ||
| 18 | |||
| 19 | = Accessing Dependency-Track = | ||
| 20 | |||
| 21 | (% class="box warningmessage" %) | ||
| 22 | ((( | ||
| 23 | Pilotkunden Preview ist | ||
| 24 | ))) | ||
| 25 | |||
| 26 | == Preconditions in DevOps portal to access Dependency-Track == | ||
| 27 | |||
| 28 | 1. A Dependency-Track license must be assigned to the user | ||
| 29 | 1. Dependency-Track must be added to the tool list of the project | ||
| 30 | |||
| 31 | (% class="box warningmessage" %) | ||
| 32 | ((( | ||
| 33 | ⚠ **Note** | ||
| 34 | Im Gegensatz zu anderen Tools ist ein Login nur dann möglich, wenn der User eine Lizenz hat und in mindestens einem DepTrack Projekt eine Rolle hat | ||
| 35 | ))) | ||
| 36 | |||
| 37 | |||
| 38 | |||
| 39 | |||
| 40 | |||
| 41 | |||
| 42 | |||
| 43 | After completing the preconditions, a project in Dependency-Track, which is part of the DevOps-as-a-Service toolchain, can be accessed via the DevOps Portal or directly through a URL. | ||
| 44 | |||
| 45 | == Via DevOps Portal == | ||
| 46 | |||
| 47 | Go to the DevOps Portal Homepage and click on the link //Project// in the Project Vulnerabilities tile: | ||
| 48 | |||
| 49 | [[image:deptrack.png||alt="Deptrack -Tile" data-xwiki-image-style-border="true" height="211" width="459"]] | ||
| 50 | |||
| 51 | (% class="box warningmessage" %) | ||
| 52 | ((( | ||
| 53 | ⚠ **Note** | ||
| 54 | If you are still unable to access your project in Dependency-Track, it may be because you are logged in with an old session that still uses outdated permissions or To resolve this issue, please log out and then log in again: | ||
| 55 | \\[[image:login1.png||alt="Untitled2.png" height="250" width="600"]] | ||
| 56 | ))) | ||
| 57 | |||
| 58 | == Via Direct URL == | ||
| 59 | |||
| 60 | You can also access Dependency-Track directly using the following link format: | ||
| 61 | [[https:~~/~~/deptrack-<customer~>.devops.t-systems.net/projects>>https://<customer>.devops.t-systems.net/xwiki/wiki/<pkey>/view]] where <customer> is the id of your DevOps-as-a-Service instance. | ||
| 62 | |||
| 63 | If you are not already logged in to another tool in the toolchain or the DevOps portal, then you have to login using your configured SSO credentials. | ||
| 64 | |||
| 65 | |||
| 66 | |||
| 67 | == Dependency-Track Jenkins Interaction == | ||
| 68 | |||
| 69 | Nur sdcPipeline() wird unterstützt, nur maven (bisher), alles automatisch | ||
| 70 | |||
| 71 | |||
| 72 | == Collection Project und Unterprojekte == | ||
| 73 | |||
| 74 | TODO | ||
| 75 | |||
| 76 | = Users, Projects and Roles = | ||
| 77 | |||
| 78 | * Projects, users and their roles in projects are managed in the DevOps Portal, the corresponding functions in Dependency-Track are disabled (UI and API) | ||
| 79 | |||
| 80 | ⚠ **Note** | ||
| 81 | Projects in the DevOps portal are mapped to the corresponding subwikis in Dependency-Track. | ||
| 82 | |||
| 83 | * When Dependency-Track is added as a tool to an existing or new project, a corresponding subwiki is automatically created. Users assigned to the project in the DevOps Portal are then added to the subwiki with the roles defined in the configuration : | ||
| 84 | ** Role mapping: ((( | ||
| 85 | |=Project Role in DevOps Portal|=Permissions in XWiki | ||
| 86 | |Admin| POLICY_VIOLATION_ANALYSIS,''VIEW_POLICY_VIOLATION,''VIEW_PORTFOLIO,'VIEW_VULNERABILITY,''VULNERABILITY_ANALYSIS' | ||
| 87 | |Master|(% colspan="1" %)Can view, comment, and edit pages, but cannot delete content | ||
| 88 | |Developer|(% colspan="1" %)Similar to Master | ||
| 89 | |Viewer|Read-only access. Can only view content, no edits or comments allowed | ||
| 90 | |||
| 91 | A detailed description of the XWiki role model can be found [[here>>https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/Permission%20types/]] | ||
| 92 | ))) | ||
| 93 | |||
| 94 | = Main Features = | ||
| 95 | |||
| 96 | Inside DevOps-as-a-Service, deptrack is mainly used for writing specifications and documentations. See below for a list of the main features of XWiki. | ||
| 97 | |||
| 98 | == Collaborative Content Editing == | ||
| 99 | |||
| 100 | * WYSIWYG and wiki syntax editors | ||
| 101 | * Version control and history tracking | ||
| 102 | * Inline and structured content editing | ||
| 103 | * Commenting and annotations | ||
| 104 | |||
| 105 | == Advanced Page & Document Management == | ||
| 106 | |||
| 107 | * Hierarchical page structure (nested pages) | ||
| 108 | * Templates for creating structured documents | ||
| 109 | * Tags, categories, and metadata support | ||
| 110 | * File attachments and preview | ||
| 111 | |||
| 112 | == Powerful Search and Navigation == | ||
| 113 | |||
| 114 | * Full-text search (Solr-based) | ||
| 115 | * Faceted search filters | ||
| 116 | * Page index, breadcrumbs, and navigation panels | ||
| 117 | |||
| 118 | == Macros and Widgets == | ||
| 119 | |||
| 120 | * Built-in and custom macros (charts, galleries, diagrams) | ||
| 121 | * Embedding of rich media (videos, iframes, etc.) | ||
| 122 | * Markdown and LaTeX support | ||
| 123 | |||
| 124 | |||
| 125 | |||
| 126 |