dependency-track good first issues (Java)

enhancement p2 good first issue size/S

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Project cloning should provide an option to replicate history of metrics 3 days ago

enhancement p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

MCP Server for Dependency Track 6 days ago

enhancement help wanted spike / research

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add SAML integration 6 days ago

enhancement help wanted p3

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add support for advisories defined in CSAF 9 days ago

enhancement help wanted p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

GitHub Actions for Automating Updates of SPDX Licences and CWE Dictionaries 11 days ago

enhancement p3 good first issue

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Evaluate trivy-db as source for vulnerability database 12 days ago

help wanted spike / research size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Towards a centralized vulnerability database for Dependency-Track 18 days ago

enhancement help wanted p2 size/XL

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Include KEV status in exported files 19 days ago

enhancement p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

GET /v1/component/project/{projectUuid}/dependencyGraph/{componentUuids} rejects multiple |-separated UUIDs with 400 "Invalid UUID" 22 days ago

defect p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Prevent error level notifications from being sent when repositories return 404s 23 days ago

defect p3 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Allow PUT /v1/notification/rule to supply notifyOn and publisherConfig parameters 27 days ago

enhancement p3 good first issue

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

OSV advisories scoped to one architecture (`arch` purl qualifier) are matched against components of any architecture 27 days ago

defect p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Proposal: Migrate docs from Material for MkDocs to Zensical 29 days ago

enhancement help wanted p3 documentation size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Project cloning should replicate "Last BOM import" and "Last Measurement" time stamps (at least when cloning components and alerts/analyses) about 1 month ago

enhancement p3 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Email integration should support OAuth2.0 authentication about 1 month ago

enhancement help wanted p2 size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

VIEW_PORTFOLIO permissions ability to download the SBOM about 1 month ago

defect p3 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Allow custom claim parser during OIDC login procedure for teams resolution about 1 month ago

enhancement p2 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Provide signatures for webhook alerts about 2 months ago

enhancement p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Support import of OpenVEX statements about 2 months ago

enhancement p2 good first issue size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Document Support for Amazon Aurora PostgreSQL with the AWS JDBC Driver 2 months ago

enhancement help wanted p3 size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Support for oauth2-proxy 2 months ago

enhancement help wanted p3 size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add support for multiple licenses 2 months ago

enhancement help wanted p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Offer a mechanism to bootstrap / provision a new Dependency-Track instance 2 months ago

enhancement help wanted p2 size/L

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Aliases do not appear to be reported in notifications 3 months ago

defect p3 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Move from unsupported tools property to replacement 3 months ago

enhancement p3 good first issue cdx-1.6 size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

CPE fuzzy matching fails when strings contain valid escaped colons 4 months ago

defect p2 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

The MavenMetaAnalyzer task fails due to invalid URLs 4 months ago

defect p2 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Populate Manufacturer field in downloaded SBOM's 4 months ago

enhancement p3 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add ALERT_RULE_CONFIGURATION permission 4 months ago

enhancement p2 good first issue access control size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

OpenAPI schema missing for `/api/v1/finding/project/{uuid}` response 4 months ago

defect p2 good first issue api docs size/S api-inconsistency

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Restructure OpenAPI Spec Versions to Include Server Release Version (v5 Regression) 5 months ago

enhancement p3 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Set SameSite attribute on session cookie created by the frontend 5 months ago

enhancement p3 good first issue

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Specifying only Group Name and Version will not match VulnerableSoftware using the Internal Analyzer. 5 months ago

defect p2 good first issue

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Expiration support for vulnerability suppressions 5 months ago

enhancement p3 good first issue size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Projects view, versions column should support semantic versioning 5 months ago

enhancement help wanted

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Fine Grained ACL 5 months ago

help wanted p2 size/XL

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Re-implement fuzzy analysis for internal scanner 5 months ago

enhancement help wanted p3 size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Possibility for DependencyTrack to Create a DefectDoJo Product and Engagement 6 months ago

enhancement help wanted integration/defectdojo

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

JAVA_OPTIONS cannot be set in docker-compose.yml 7 months ago

defect p2 good first issue documentation

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Usability of VulnerabilityAudit 7 months ago

enhancement p3 good first issue size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Take CycloneDX 1.2 patches into account when analysing CVE exposure 8 months ago

enhancement help wanted p2 cdx-1.3 needs milestone

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add option to deactivate old project versions on BOM upload 8 months ago

enhancement p3 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add support for SPDX v3 9 months ago

enhancement help wanted on hold p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Group Sync with Azure AD via graph.windows.net does not seem to work anymore. 9 months ago

defect help wanted p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add Exploit Prediction for GitHub Advisories Vulnerabilities 9 months ago

enhancement p2 good first issue integration/github size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Rest-API Date-Time objects are epoch not strings 9 months ago

defect p2 good first issue api docs size/S api-inconsistency

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Trivy analyzer can't detect SLES OS 11 months ago

defect help wanted in triage integration/trivy

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

MS Teams is retiring webhooks - Power Automate workflows is the new black 11 months ago

enhancement help wanted p2 integration/msteams size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Define vulnerability database schema 12 months ago

help wanted spike / research size/L

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Jira templating with french has parsing JSON error 12 months ago

defect p2 good first issue size/S integration/jira

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Error in CacheStampedeBlocker for pre-release only NuGet packages about 1 year ago

defect p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Reduce ERROR notifications for certain "normal" metadata scenarios (i.e. 404) about 1 year ago

enhancement p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Feature Request: Support for CycloneDX Scope Data about 1 year ago

enhancement help wanted p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

DependencyTrack/dependency-track

Open Issues Need Help