dependency-track

依赖追踪是一个智能组件分析平台，帮助组织识别并降低软件供应链中的风险。

  • 语言Java
  • 默认分支main
  • 大小139.6 MB
  • 更新1 天前
在 GitHub 打开

README

OWASP Dependency-Track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM).

Website Documentation Docker Pulls License

Build Tests E2E Tests Coverage

LinkedIn Bluesky Mastodon YouTube

Important 重要

Looking for Dependency-Track v4?

Quickstart

Want to kick the tires? Follow the Quickstart tutorial to get a local instance running with Docker Compose in a few minutes.

Documentation

User-facing documentation is rendered at https://dependencytrack.github.io/docs/ and maintained in the docs repository.

Contributing

  1. Code of conduct
  2. Contribution guidelines
  3. Developer guide

Community

Dependency-Track is an open source project maintained by a community of contributors. Join the monthly community meeting to hear project updates, ask questions, and meet other users and maintainers.

See also

评论

暂无评论