DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

https://dependencytrack.org/

DependencyTrack/dependency-track Issues

Support Import of CycloneDX 1.6 BOMs
Closed 3 days ago4
Upgrade REST API Spec from Swagger 2.0.0 to OAS 3.1.x
Closed 4 days ago2
401 HTTP Request Error
Updated 5 days ago1
Allow Policies to have rules based on EPSS values
Updated 5 days ago1
Global vulnerability audit view broken for MSSQL
Closed 5 days ago14
provide support for hackage.haskell.org and nixpkgs
Closed a month ago5
BOM Validation: Unable to determine schema version from JSON
Closed 6 days ago1
VulnDB Vulnerabilities Always Shown as Unassigned Severity
Closed a month ago3
A field with a length greater than 255 is causing an error during BOM processing.
Closed a month ago2
Cannot delete OpenID Connect users
Closed 9 days ago2
NuGet component with space breaks analyzer
Updated 9 days ago1
Dependency-Track Should Perform Update Check
Updated 9 days ago2
JSON Schema for NVD Vulnerability Data API version 2.1.0
Closed 24 days ago2
Incomplete Recognition of Users/Projects Created through APIs.
Updated 9 days ago1
False positive reported for webpack
Closed 10 days ago1
Update Dependency-Track BOM to Support CycloneDX 1.5
Updated 11 days ago1
Global Suppression for Withdrawn or Rejected CVEs/Vulnerabilities
Updated 13 days ago3
Enhance MS Teams alerts with project name and URL on BOM_PROCESSING_FAILED events
Closed 14 days ago1
Flutter packages (pub) get vulnerability from npm
Updated 16 days ago
Unique constraint violation while mirroring NVD via feed files
Closed 16 days ago
Issue connecting a AWS RDS Postgres instance to Dependency Track Api Server
Closed 2 months ago7
About the Restful API error: lookup and search
Closed 19 days ago1
API returns 500 Internal Server Error instead of 405
Closed 19 days ago
VulnDB vulnerabilities are not assigning CVEs as Aliases
Closed 19 days ago1
Problem with support BOM from trivy 0.50.0 (also 0.50.1)
Closed 19 days ago3
Automatically convert package-lock.json to CycloneDX and import
Closed 19 days ago1
Notification not triggered for existing vulnerabilities
Closed 19 days ago1
Vulnerability Table Error
Closed 19 days ago2
issues with team notifications
Updated 19 days ago5
Use cpe and/or purl from cyclonedx metadata.component to set project cpe and/or purl.
Updated 24 days ago1
Ability to create a policy condition based on "Attributed on" value.
Updated a month ago
Add an API endpoint that returns the UUID of the last uploaded BoM for a project
Closed a month ago2
Dependency Track does not recognize patch revisions
Closed 2 months ago2
Expiration support for vulnerability suppressions
Updated a month ago
OpenAPI GET /v1/component/project/{uuid} return value incorrect
Updated a month ago4
Enhance metrics to include audited/unaudited violations by classification
Updated a month ago2
Add support for Amazon ALAS datasources for Amazon Linux 1, 2 & 2023
Updated a month ago3
Can't upload BOM
Closed 2 months ago2
Inactive parent when its actual active
Updated a month ago1
Enhance badge API to require authorization
Updated a month ago1
Classifier doesn't change when BOM of existing Project is reuploaded
Updated 2 months ago
Allow ask for values changed after a timestamp, especially in `/project` API
Updated 2 months ago
DependencyTrack treats newer version as vulnerable while it is not
Updated 2 months ago
False positive with jetty
Updated 2 months ago
View Only Access to All Projects
Updated 2 months ago
Please exclude -alpha, -beta, -rc, -preview, -SNAPSHOT from possibly latest versions of a component
Updated 2 months ago
Upcoming Trivy integration is awesome, but a bit slow
Updated 2 months ago
Reset admin password documentation
Updated 2 months ago
The MavenMetaAnalyzer task fails due to invalid URLs
Updated 2 months ago1
Export and Import VEX fails to match Vulnerabilities correctly
Updated 2 months ago