OWASP Dependency-Track

CloudBees CIVersion: 7.0.0

Tier 3: Community

Plugin ID: dependency-track

Minimum Jenkins required: 2.555.1

Last released: 7 days, 2 hours ago

This plug-in publishes Software Bill-of-Materials (SBOM) to Dependency-Track for continuous analysis. Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Plugin Support Policies

Security Warnings

CSRF vulnerability and missing permission checks allow capturing credentials(last version affected: 3.1.0)

Download Plugin

OWASP Dependency-Track 7.0.0

Plugin documentation

SHA1:

39462b98caf7e25271dcdc27b8f3f5b471e35cc6

SHA256:

e0189e47bfce46032feb133393e6619fbd2b1772541d6d30090ded99559d4702

Older versions

Maintainers:

Ronny Perinke

Dependencies:

okhttp-api v5.3.2-200.vedb_720a_cf1f8 (required)
credentials v1502.v5c95e620ddfe (required)
plain-credentials v199.v9f8e1f741799 (required)

All CloudBees CI Plugins