Where does OWASP Dependency-Track actually scan to get data about a project? [closed] - owasp

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 1 year ago.
Improve this question
I've scoured https://docs.dependencytrack.org/ for information on how to actually use Dependency-Track.
What does Dependency-Track actually scan to get the data about my software build?
When I run Dependency-Track -> Projects -> Create Project -> and give the project a name, it just takes me to the project overview and the vulns, components, and auditing graphs are all at zero.
Do I point it to Jenkins or to GitLab? I don't see a place to put in the URL and creds for those locations in the project details.

Have a closer look at https://docs.dependencytrack.org/usage/cicd/ .
You need to feed it with your project BOM. It will then compare components from BOM against known vulnerabilities.
How you do that depends. If you are using Jenkins then it will be a bit easier with a Jenkins plugin https://plugins.jenkins.io/dependency-track/. If you are using GitLab CI then you need to use appropriate for your project SBOM generator from https://cyclonedx.org/tool-center/.

Related

How do I restore deleted code inside a file? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 12 months ago.
Improve this question
I'm using autosave in vscode and I accidently deleted important code and I can't restore it anymore even using CTRL + Z
Is there any solution to restore the lost code?
If it is no longer possible with CTRL + Z and you have not initiated a version software for your project, it is no longer possible to reconstruct the code.
An unlikely case would be if you have not yet saved the file you have edited, the original code would at least still be contained in the file. But I guess that's not the topic here because you use autosave.
Is your project perhaps under version control? If yes, you could grab the missing code from the previous state of the project. If not, I suggest you look into code version control systems, mainly git (https://en.wikipedia.org/wiki/Git), it will prevent similar situations from arising in the future, plus it enables multiple people to work on the same code.

VersionOne: Filter Issues by Project [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I am quite new using VersionOne and I would like to know if there is an easy way to filter issues by project; I would like not to have to add a tag dedicated to the project name in order to be able to filter them
Thanks in advance for your help
I have found the question to my answer.
The filter "by project" is not in the "funnel" area as all the other filters in VersionOne.
In order to filter "by project" the user has to click on the arrow near the project name (in the blue square in the top left) and select the project(s) which want to see in the project tree

Download Visual Studio code [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 4 years ago.
Improve this question
Is it possible to download full visual studio code instead of using the web instaler of the official page?
I want several users to do the installation simultaneously and I want to avoid that everyone makes a simultaneous download of the same product.
Thank you.
Use this direct link
https://go.microsoft.com/fwlink/?Linkid=852157
assuming you are using Windows 64bit

Where is the Open Source repository for Swift 2.0? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 7 years ago.
Improve this question
Apple announced Swift becoming Open Source since now two weeks and in his web site https://developer.apple.com/swift, no information was provided to find repository, documentation or Linux implementation announced at WWDC.
Someone have information about this ?
If you have read it carefully it clearly says that it will be released later this year. So you will find no repository yet
Open Source Later this year Swift will be released as open source.
Swift’s unique combination of elegance, power, and safety has the
opportunity to move the entire software industry forward. It is
exciting to imagine what we will build together
Late year update:
www.swift.org

Launching Hacker News Clone - Next Steps? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 1 year ago.
Improve this question
I want to use Hacker News' open source software to build a link sharing community for another industry. I followed the instructions on the arc github page and was able to get a clone up and running on my local environment. I was wondering what the next steps were.
What kind of hosting is required for this kind of a site (since arc is a bit esoteric)? If we assume that I have substantial traffic, is it best to go the cloud hosting route? I noticed Hacker News itself is hosted with ThePlanet, should I do the same?
For any kind of lisp hosting, you're pretty much on your own. It depends on how serious you are about doing this, and how big the starting community will be. If it's a work thing, talk to your network guy about getting a server provisioned. If it's a personal project, you should really consider a VPS server; something like Linode or Slicehost. Note that these aren't specifically Lisp hosts; they give you a bare metal Linux server and let you do what you want with it (including hosting Lisp apps).