This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Dependency Track Project"
m (case) |
m (doc update) |
||
| Line 14: | Line 14: | ||
==Features== | ==Features== | ||
| + | * Tracks application, library, framework, operating system, and hardware components | ||
* Tracks component usage across all version of every application in an organizations portfolio | * Tracks component usage across all version of every application in an organizations portfolio | ||
* Identifies multiple forms of risk including | * Identifies multiple forms of risk including | ||
| Line 37: | Line 38: | ||
* Configurable notifications supporting Slack, Microsoft Teams, Webhooks, and Email | * Configurable notifications supporting Slack, Microsoft Teams, Webhooks, and Email | ||
* Supports standardized SPDX license ID’s and tracks license use by component | * Supports standardized SPDX license ID’s and tracks license use by component | ||
| − | * Supports importing | + | * Supports importing [https://cyclonedx.org CycloneDX] and [https://spdx.org/ SPDX] Software Bill-of-Materials (SBOM) formats |
| − | |||
* Easy to read metrics for components, projects, and portfolio | * Easy to read metrics for components, projects, and portfolio | ||
* Native support for Kenna Security, Fortify SSC, and ThreadFix | * Native support for Kenna Security, Fortify SSC, and ThreadFix | ||
* API-first design facilitates easy integration with other systems | * API-first design facilitates easy integration with other systems | ||
| − | * API documentation available in | + | * API documentation available in OpenAPI format |
* Supports internally managed users, Active Directory/LDAP, and API Keys | * Supports internally managed users, Active Directory/LDAP, and API Keys | ||
* Simple to install and configure. Get up and running in just a few minutes | * Simple to install and configure. Get up and running in just a few minutes | ||
Revision as of 06:27, 29 September 2019
OWASP Dependency-TrackDependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill-of-Materials (SBOM). This approach provides capabilities that traditional Software Composition Analysis (SCA) solutions cannot achieve. Dependency-Track monitors component usage across all versions of every application in its portfolio in order to proactively identify risk across an organization. The platform has an API-first design and is ideal for use in Continuous Integration (CI) and Continuous Delivery (CD) environments.
Features
DistributionsDependency-Track supports the following three deployment options:
LicensingOWASP Dependency-Track is licensed under the Apache 2.0 license. |
Quick DownloadReady-to-deploy distributions are available from the Dependency-Track website News and Events
Community IntegrationsMediaOWASP Dependency-Track Channel (YouTube) DocumentationDependency-Track Documentation Project LeaderRelated ProjectsClassifications
| ||||
