Operationalize SBOM with OWASP Dependency-Track
summary
Covers how OWASP Dependency-Track uses CycloneDX SBOMs to inventory components (libraries, apps, containers, OS, firmware, hardware, services) across cloud, enterprise, devices and IoT, and how it applies vulnerability intelligence from sources like NVD, Sonatype OSS Index, GitHub Advisories and VulnDB to identify vulnerable components. Explains the platform’s use in DevSecOps, procurement and M&A workflows and its flexible policy engine for assessing security, operational and license risk across teams, suppliers and partners.
AI-written summary · about
related talks
50mSBOM SmackDown: Conquer dragons in the shadows with OWASP CycloneDX
46mSafely through the dependency minefield using OWASP Dependency Track
16mKeynote: SBOM is Coming: Why You Should Care and How You Can Help
47mThe Missing Link - How we collect and leverage SBOMs
29mMaking Software Bill of Materials (SBOMs) Actionable
25mA Primer on Software Bill of Materials for DevSecOps
47mI Can’t Cope! How OWASP Is Helping To Manage Vulnerability Overload
54mSupply Chain Sec /w Dependency Track