Dependency-Track Skill

Comprehensive guide for implementing, deploying, and operating Dependency-Track - an intelligent Software Composition Analysis (SCA) platform that identifies and reduces risk in the software supply chain through SBOM management.

Current Versions:

• Helm Chart: 0.40.0
• App Version: 4.13.6
• Helm Repository: https://dependencytrack.github.io/helm-charts

Overview

Dependency-Track is an API-first platform that:

• Consumes and produces CycloneDX SBOMs and VEX documents
• Monitors components for known vulnerabilities across the entire portfolio
• Integrates with NVD, GitHub Advisories, OSS Index, Snyk, Trivy, OSV, and VulnDB
• Provides policy enforcement for security, license, and operational compliance
• Supports OAuth 2.0, OIDC, LDAP, Active Directory authentication
• Supports EPSS (Exploit Prediction Scoring System) for prioritization
• Identifies APIs and external service components