The Wayback Machine - https://web.archive.org/web/20201109132326/https://github.com/topics/component-analysis
Skip to content
#

component-analysis

Star

Here are 11 public repositories matching this topic...

Language: All
Filter by language
All 11 Java 7 Go 2 HTML 1 Python 1
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

DependencyTrack / dependency-track

Star

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
security owasp bom vulnerabilities vulndb appsec component-analysis nvd vulnerability-detection sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx
  • Updated Nov 9, 2020
  • Java

pmckeown / dependency-track-maven-plugin

Star
Open

Add Name to Findings Output

pmckeown
pmckeown commented Oct 8, 2020

Current output from the findings goal looks like the example below. It would be useful to have the Name of the issue in the output too.

Current:

[INFO] MEDIUM: org.apache.struts:struts-core:1.3.5
[INFO] 
[INFO] ** DISPUTED ** The DebuggingInterceptor component in Apache Struts befor
[INFO] e 2.3.1.1, when developer mode is used, allows remote attackers to execu
[INFO] te arbitrary c
Read more
enhancement good first issue

Improve this page

Add a description, image, and links to the component-analysis topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the component-analysis topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.