DependencyTrack / DependencyTrack/dependency-track

Change analysis for SBOMs

Open
#1,221 1 comment 1 reaction 0 assignees View on GitHub
enhancement help wanted p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

Hey! First of all, I'd like to thank you all for developing such a great project!

It would be great if Dependency Track could display difference between two SBOMs. That would help analysing changes between versions of a project. At first, Dependency Track could display basic diffs for components and services, for example, what was added/removed, what versions/URLs were updated.

I've looked for existing open/closed issues but didn't find anything. What do you think about it? Are you willing to accept this contribution?

### Current Behavior:

Dependency Track can't show difference between two SBOMs.

### Proposed Behavior:

- In the Projects page, select two SBOMs and click Compare.
- Dependency Track displays a table that shows basic difference between the selected SBOMs
- Added and removed components
- Updated component versions
- Updated services

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.