DependencyTrack / DependencyTrack/dependency-track

Support CEL based Expression for Detecting Internal Components

Open
#3,910 2 comments 0 reactions 0 assignees View on GitHub
enhancement p2 size/M
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Currently, Dependency-Track lacks only support for detecting internal components using component name, group based regex.

### Proposed Behavior

Integrate CEL-based expression support into Dependency-Track to allow users to define and use expressions for detecting internal components within their projects. These expressions could also access other component properties like purl, cpe, swid, etc., as well as project properties and tags. To maintain backward compatibility, existing regex can be migrated into CEL-based expressions.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.