dependency-check / dependency-check/DependencyCheck
Create analyzer for OWASP Dependency-Track
Open
enhancement
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
OWASP Dependency-Track (dev3+) allows the importing and refining of Dependency-Check XML reports. It also allows the importing of SPDX and the manual creation of components.
ODT provides a REST API (similar to Maven Central) that allows the searching of components by MD5/SHA1 hashes and will respond back with the highest confidence metadata available.
This ticket is to track the creation of an analyzer for Dependency-Check so that it can use Dependency-Track as a source of evidence.
Contributor guide
Assessment
This issue has not been assessed yet.