DependencyTrack / DependencyTrack/dependency-track

Generate Dependencies in Dependency Graph from different Projects

Open
#1,369 0 comments 1 reaction 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:
If I create two projects, e.g. project1 and project2 and assign dependencies in the CycloneDX SBOM for project1 in a component they do not get transferred to project2 where the component is used, too.

### Proposed Behavior:
If I add a SBOM with a component to a project, DT should look-up if there are known dependencies (depending on e.g. the PURL) in other projects for the component and add them to the new projects.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.