A Practical Approach to SBOM in CI/CD Part II — Deploying Dependency-Track

The article presents how to store and analyse Software Bill of Materials with OWASP Dependency-Track to identify security vulnerabilities in open-source components. It guides how Dependency-Track can be deployed in a production environment and summarises pros and cons of this platform.

article bill components cons dependency environment guides identify materials netsec owasp platform sbom security software software bill of materials store track vulnerabilities