SBOMS, CycloneDX and Dependency Track: Automation for Survival with Steve Springett
The OWASP Podcast Series
00:00
The Importance of Dependency Track
Dependency track started in 2013, when an intern at my employer needed to track the full stack inventory of server appliances. The US government has had a really dramatic impact on the level of understanding of what these things are and why they're important. We maybe had less than 100 organizations using dependency track before it was used by multiple governments,. And every single month, we know that there are dependency track systems responsible for analyzing over 300 million components for known vulnerabilities.
Transcript
Play full episode
