Security Wine (бывший - DevSecOps Wine)

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

https://github.com/DependencyTrack/dependency-track



Два доклада про то как происходит интеграция в Jenkins pipeline



Find and Track the hidden vulnerabilities inside your dependencies

https://www.youtube.com/watch?v=d2WMONyBbTw



Dependency Track - Steve Springett (OWASP)

https://www.youtube.com/watch?v=IPWPISSk5rc