Dependency Check Plugin
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
Application Security TestingStatic Analysis (SAST) & LintingOpen Source
About
Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2017: A9 - Using Components with Known Vulnerabilities. This plug-in can independently execute a Dependency-Check analysis and visualize results.
Open Source Health
- Stars
- 141
- Forks
- 74
- License
- Apache-2.0
- Last commit
- 1 months ago
Java
Alternatives to Dependency Check Plugin
Burp AI Agentby six2dezBurp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Semgrepby SemgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Shannonby KeygraphShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.Zaproxyby ZaproxyThe ZAP by Checkmarx Core project
WSTGby OWASPThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Resources & Links
Related Categories
Using Dependency Check Plugin?
Track its cost next to the rest of your stack and get a reminder before it renews.
Add to my stackVendor
Jenkinsci
Publisher of Git Client Plugin, SSH Steps Plugin and Jenkins
