The safeguards map / 1.1 Code and dependencies
OWASP Dependency-Check
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A software composition analysis tool that identifies a project's dependencies and checks them for known, publicly disclosed vulnerabilities.
Where it sits
1.1 Code and dependencies (primary): Scans a project's dependencies and reports the known, publicly disclosed vulnerabilities that match them.
Dependency-Check is a Software Composition Analysis (SCA) tool suite that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by handin CI
Handoffs
produces Findings: SARIF
Collector's note
The CI run mode rests on the project page's list of build integrations (Jenkins, GitHub Actions, Azure DevOps).
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.