Install this app
In your Cloudron dashboard, open the App Store, choose "Community apps" and paste this URL:
https://raw.githubusercontent.com/BrutalBirdie/Cloudron-Dependency-Track-App/refs/heads/main/CloudronVersions.json
Description
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. It ingests CycloneDX SBOMs and tracks every component across all projects and versions.
Features
- Finds known vulnerabilities from NVD, GitHub Advisories, OSV and others
- Flags outdated components by checking npm, PyPI, Packagist, Maven, Go and more
- Policy engine for security, license and operational rules
- License risk tracking
- REST API for CI/CD integration
Recent Changes
Initial version with Dependency-Track 5.2.0
Cloudron login via OIDC, Cloudron groups map to Dependency-Track teams
Email notifications through the Cloudron mail server