DependencyTrack / DependencyTrack/dependency-track
Generate Dependencies in Dependency Graph from different Projects
Open
enhancement
p2
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
If I create two projects, e.g. project1 and project2 and assign dependencies in the CycloneDX SBOM for project1 in a component they do not get transferred to project2 where the component is used, too.
### Proposed Behavior:
If I add a SBOM with a component to a project, DT should look-up if there are known dependencies (depending on e.g. the PURL) in other projects for the component and add them to the new projects.
Contributor guide
Assessment
This issue has not been assessed yet.