OWASP Dependency-Track

CloudBees CIVersion: 6.0.2

Tier 3: Community

Plugin ID: dependency-track

Minimum Jenkins required: 2.479.1

Last released: 9 days, 10 hours ago

This plug-in publishes Software Bill-of-Materials (SBOM) to Dependency-Track for continuous analysis. Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Plugin Support Policies

Release Notes

Security Warnings

CSRF vulnerability and missing permission checks allow capturing credentials(last version affected: 3.1.0)

Download Plugin

OWASP Dependency-Track 6.0.2

SHA1:

95d6dd6920ffbdbbd4dd23b0b71541f570c4754e

SHA256:

8fe880f844bbbc4d26026b52879613216420f722c60cd1b4d09b540871b57eb1

Older versions

Maintainers:

Ronny Perinke

Dependencies:

okhttp-api v4.11.0-189.v976fa_d3379d6 (required)
credentials v1419.v2337d1ceceef (required)
plain-credentials v183.va_de8f1dd5a_2b_ (required)

All CloudBees CI Plugins