DependencyTrack / DependencyTrack/dependency-track
Change analysis for SBOMs
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Hey! First of all, I'd like to thank you all for developing such a great project!
It would be great if Dependency Track could display difference between two SBOMs. That would help analysing changes between versions of a project. At first, Dependency Track could display basic diffs for components and services, for example, what was added/removed, what versions/URLs were updated.
I've looked for existing open/closed issues but didn't find anything. What do you think about it? Are you willing to accept this contribution?
### Current Behavior:
Dependency Track can't show difference between two SBOMs.
### Proposed Behavior:
- In the Projects page, select two SBOMs and click Compare.
- Dependency Track displays a table that shows basic difference between the selected SBOMs
- Added and removed components
- Updated component versions
- Updated services
Contributor guide
Assessment
This issue has not been assessed yet.