Description

OWASP Dependency-Check is a software composition analysis (SCA) tool designed for DevOps teams. It enables users to detect publicly disclosed vulnerabilities contained within a project’s dependencies, collect and store the information about the dependencies, track and monitor the applications in the portfolio, scan source code and applications, and spot the precise source files, line numbers, and subsections of lines with issues. Features include experimental analyzers for Python, Ruby, PHP (composer), and Node.js applications, report generation, application development management, chart views, issue highlighter, and integration with third-party libraries.