DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

dependency-check / dependency-check-sonar-plugin

Integrates Dependency-Check reports into SonarQube