OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour with single instances holding 250K+ projects and 10M+ components. Now with horizontal scaling, fault tolerance, and supply chain integrity checks.

dependencytrack.org
#OWASP #SBOM #AppSec

On the #norsys blog, I've just posted an article which explains how building a local development environment for @dependencytrack.bsky.social with Docker Compose, code and examples included.

medium.com/norsys-octog...

#DependencyTrack #Trivy #Docker #DockerCompose #Security #DependencyManagement

Community meeting tomorrow at 5PM UTC! www.linkedin.com/posts/owasp-...

We're honored that @defectdojo.bsky.social has chosen Dependency-Track as one of the top #opensource tools in the #SCA category this year.

Here's the press release with all the other great tools on the list.
www.businesswire.com/news/home/20...

#SBOM #CycloneDX #OWASP

Join our community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at #Monzo Bank!

Learn how Monzo replaced a proprietary vulnerability scanner with @cyclonedx.bsky.social #SBOMs & Dependency-Track.

Calendar Invite: dub.sh/dtcalendar
Zoom Link: dub.sh/dtzoom

KoalaCon 2024 was a huge success. Thank you to all the speakers, including Olle E Johansson, Anthony Harrison, Niklas Düster, Viktor Petersson, and Piotr P. Karwasz. Couldn't attend. No worries, the recording is available on YouTube.

youtu.be/NStzYW4WnEE?...

#OWASP #SBOM #SoftwareTransparency