OWASP Dependency-Check Review

1 1

Review of OWASP Dependency-Check powered by the Slant community.

OWASP dependency-check is open-source and can be used to scan Java and .NET applications via the CLI or using plugins.
Read articles Continuous Security with OWASP Dependency Check and Integrating OWASP Dependency Check with Jenkins to CI/CD.

SpecsUpdate

PlatformsWindows, Linux, Mac, Docker

TechnologyJava

Ranked in these QuestionsQuestion Ranking

What are the best services to scan your GitHub project for outdated Nuget Packages (and other vulnerabilities) that is free for Open Source projects?

What are the best code security analyzers?

What is the best security software for DevSecOps?

What are the best DevOps security tools?

Pros

Pro
Free

Pro
Jenkins plugin

Pro
Azure DevOps Extension

An Azure DevOps Extension is available on the Visual Studio Marketplace.

Cons

Con
Needs Java

Needs Java to be installed.

Con
No TeamCity plugin

There is no official TeamCity plugin, but there seems to be an unofficial tool: PacMon.

Alternative Products

Snyk

WhiteSource Bolt

Built By the Slant team

Find the best product instantly.

4.7 star rating

Try it now - it's free

OWASP Dependency-Check Review

SpecsUpdate

Ranked in these QuestionsQuestion Ranking

Pros

Pro Free

Pro Jenkins plugin

Pro Azure DevOps Extension