DependencyTrack/dependency-track

MCP Server for Dependency Track 4 days ago

enhancement help wanted spike / research

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add ALERT_RULE_CONFIGURATION permission 10 days ago

enhancement p2 good first issue access control size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

OpenAPI schema missing for `/api/v1/finding/project/{uuid}` response 14 days ago

defect p2 good first issue api docs size/S api-inconsistency

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Move from unsupported tools property to replacement 19 days ago

enhancement p3 good first issue cdx-1.6 size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Restructure OpenAPI Spec Versions to Include Server Release Version (v5 Regression) 21 days ago

enhancement p3 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add support for multiple licenses 22 days ago

enhancement help wanted p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Set SameSite attribute on session cookie created by the frontend 22 days ago

enhancement p3 good first issue

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

CPE fuzzy matching fails when strings contain valid escaped colons 24 days ago

defect p2 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Specifying only Group Name and Version will not match VulnerableSoftware using the Internal Analyzer. 24 days ago

defect p2 good first issue

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Expiration support for vulnerability suppressions 29 days ago

enhancement p3 good first issue size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add support for advisories defined in CSAF about 1 month ago

enhancement help wanted p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Projects view, versions column should support semantic versioning about 1 month ago

enhancement help wanted

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Fine Grained ACL about 1 month ago

help wanted p2 size/XL

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Re-implement fuzzy analysis for internal scanner about 1 month ago

enhancement help wanted p3 size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Offer a mechanism to bootstrap / provision a new Dependency-Track instance about 1 month ago

enhancement help wanted p2 size/L

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Possibility for DependencyTrack to Create a DefectDoJo Product and Engagement about 2 months ago

enhancement help wanted integration/defectdojo

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Towards a centralized vulnerability database for Dependency-Track 2 months ago

enhancement help wanted p2 size/XL

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

JAVA_OPTIONS cannot be set in docker-compose.yml 3 months ago

defect p2 good first issue documentation

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Usability of VulnerabilityAudit 3 months ago

enhancement p3 good first issue size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Take CycloneDX 1.2 patches into account when analysing CVE exposure 4 months ago

enhancement help wanted p2 cdx-1.3 needs milestone

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add option to deactivate old project versions on BOM upload 4 months ago

enhancement p3 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add support for SPDX v3 5 months ago

enhancement help wanted on hold p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Group Sync with Azure AD via graph.windows.net does not seem to work anymore. 5 months ago

defect help wanted p2

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Add Exploit Prediction for GitHub Advisories Vulnerabilities 5 months ago

enhancement p2 good first issue integration/github size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Rest-API Date-Time objects are epoch not strings 5 months ago

defect p2 good first issue api docs size/S api-inconsistency

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Trivy analyzer can't detect SLES OS 7 months ago

defect help wanted in triage integration/trivy

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

MS Teams is retiring webhooks - Power Automate workflows is the new black 7 months ago

enhancement help wanted p2 integration/msteams size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Define vulnerability database schema 8 months ago

help wanted spike / research size/L

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Jira templating with french has parsing JSON error 8 months ago

defect p2 good first issue size/S integration/jira

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Project cloning should replicate "Last BOM import" and "Last Measurement" time stamps (at least when cloning components and alerts/analyses) 8 months ago

enhancement p3 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Email integration should support OAuth2.0 authentication 8 months ago

enhancement help wanted p2 size/M

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

VIEW_PORTFOLIO permissions ability to download the SBOM 9 months ago

defect p3 good first issue size/S hacktoberfest

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Error in CacheStampedeBlocker for pre-release only NuGet packages 10 months ago

defect p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Reduce ERROR notifications for certain "normal" metadata scenarios (i.e. 404) 10 months ago

enhancement p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Feature Request: Support for CycloneDX Scope Data 11 months ago

enhancement help wanted p2 good first issue size/S

DependencyTrack/dependency-track

4.0K

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java

#appsec#bill-of-materials#bom#component-analysis#cyclonedx#devsecops#hacktoberfest#nvd#ossindex#owasp#package-url#purl#sbom#sca#security#security-automation#software-composition-analysis#software-security#vulnerabilities#vulnerability-detection

Open Issues Need Help