Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: link to https://owasp.org/www-project-dependency-check/

...

For Java (Maven/Gradle) projects, the OWASP DependencyCheck plugin can be a useful tool to discover advisories in dependencies.

...

VEX documents can be consumed by our DependencyTrack instance. You can read more about this on the page about SBOM Software Bill of Materials.

...