dependency-check / dependency-check/DependencyCheck

Create analyzer for OWASP Dependency-Track

Open
#708 1 comment 1 reaction 1 assignee Claimed by @stevespringett View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

OWASP Dependency-Track (dev3+) allows the importing and refining of Dependency-Check XML reports. It also allows the importing of SPDX and the manual creation of components.

ODT provides a REST API (similar to Maven Central) that allows the searching of components by MD5/SHA1 hashes and will respond back with the highest confidence metadata available.

This ticket is to track the creation of an analyzer for Dependency-Check so that it can use Dependency-Track as a source of evidence.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.