DependencyTrack / DependencyTrack/dependency-track
Support CEL based Expression for Detecting Internal Components
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
Currently, Dependency-Track lacks only support for detecting internal components using component name, group based regex.
### Proposed Behavior
Integrate CEL-based expression support into Dependency-Track to allow users to define and use expressions for detecting internal components within their projects. These expressions could also access other component properties like purl, cpe, swid, etc., as well as project properties and tags. To maintain backward compatibility, existing regex can be migrated into CEL-based expressions.
### Checklist
- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
Contributor guide
Assessment
This issue has not been assessed yet.