practitionerOWASP Projects
Ingest SBOMs in CI/CD
Said by Steve Springett ·
“If you have tens of thousands of applications in your environment and you are producing software bill of materials in a CI/CD pipeline, DependencyTrack can automatically ingest, automatically analyze, and automatically alert you of any vulnerability or other types of risk.”
Transcript evidence from Steve Springett — OWASP Dependency Track — 5 Minute AppSec.