An overview of the features available in Dependency-Track v3.3.

1. What’s new in
Dependency-Track v3.3
October 2018

2.  The ability to manually upload a CycloneDX or SPDX BoM from the user
interface
 Optional automated provisioning of LDAP users
 Optional synchronization of team membership based on a users LDAP group
membership
 Added API that provides component metadata from a project in CycloneDX
format
 Added ability to track the progress of work performed when a BoM is uploaded
 Added tracking of audited and unaudited metrics
 Added ability to add new project version and optionally clone source metadata
 Added ability to search by tag name when displaying projects
Enhancements

3.  Tracks audited and unaudited metrics
 Portfolio
 Project
 Component
 Display audit trend and metrics
 Portfolio
 Project
Auditing Metrics

4. Auditing Metrics

5.  Easier to evaluate Dependency-Track
 Doesn’t require automation, CI/CD, or API integration
 Simplifies onboarding for COTS applications
 Steps
 Generate or obtain BoM
 Upload
 Profit
 Supports CycloneDX and SPDX BoM formats
Manual BoM Upload

6. Manual BoM Upload

7. Manual BoM Upload

8.  Add a new version of an existing project
 Can optionally carry over
 Project tags
 Project properties
 Dependencies
 Audit history
Add New Project Version

9. Add New Project Version

10. Add New Project Version

11. LDAP Enhancements
• Automatic User Provisioning (Optional)
• Automatic Team Synchronization (Optional)
• Greatly Improved LDAP Compatibility
• Changes to LDAP configuration
– https://docs.dependencytrack.org/changelog/
– https://docs.dependencytrack.org/getting-started/configuration/
– https://docs.dependencytrack.org/getting-started/ldap-configuration/

12. Directory Support
• ApacheDS
• Fedora 389 Directory
• Microsoft Active Directory
• NetIQ/Novell eDirectory

13. Q&A

14. Roadmap to v3.4
• Fortify SSC support
• Kenna Security support
• Dramatically improved Jenkins plugin

15. Thank You