OWASP Dependency-Track Reviews

StatusCake Reviews

OWASP Dependency-Track mentions (19)

• Show HN: Pre-alpha tool for analyzing spdx SBOMs generated by GitHub

  I've become interested in SBOM recently, and found there were great tools like https://dependencytrack.org/ for CycloneDX SBOMs, but all I have is SPDX SBOMs generated by GitHub. I decided to have a go at writing my own dependency track esque tool aiming to integrate with the APIs GitHub provides. It's pretty limited in functionality so far, but can give a high level summary of the types of licenses your... - Source: Hacker News / about 1 month ago

• SQL Injection Isn't Dead Yet

  To detect these types of vulnerabilities, we should first and foremost know our dependencies and versions, and which of them have vulnerabilities. The OWASP Top 10 2021 identifies this need as A06:2021-Vulnerable and Outdated Components. OWASP has several tools for this, including Dependency Check and Dependency Track. These tools will warn about the use of components with vulnerabilities. - Source: dev.to / about 2 months ago

• Krita fund has 0 corporate support

  Https://dependencytrack.org/ You just need to use one of the various tools out there to scan. - Source: Hacker News / 8 months ago

• Friends - needs help choosing solution for SBOM vulnerability

  OWASP Dependency Track - https://dependencytrack.org/. Source: about 1 year ago

• software inventory of my ECS tasks

  I actually want to build the same thing you are after, and I think I’ll go for the setup you describe in idea 2. The tool you can use for this is Trivy (https://trivy.dev), have it generate a SBOM and send it to Dependencytrack (https://dependencytrack.org). Source: over 1 year ago

StatusCake mentions (6)

• Monitor Connectivity Software ???

  Statuscake.com if you just need a simple up/down monitor. Source: about 2 years ago

• basic external monitoring system

  I've had a great time with statuscake.com for my personal and friends sites. They've even improved custom status pages to include an automatically signed certificate too, so you can make a site like status.yourdomain.com... Test TCP connection, specific HTTP/HTTPS query etc. 5 minute intervals for free, more with paid plans. Source: about 2 years ago

• Expired Certificate

  I use statuscake.com for external stuff and nagios for internal. PRTG is good too. Source: over 2 years ago

• Website uptime reporting

  I use statuscake.com for all my personal / friend sites. There seems to be no limit to number of sites to monitor for basic 5 minute intervals in the free account. Source: over 2 years ago

• How to get notified when home loses power?

  I use noip.com for a free domain name and a free plan on statuscake.com for this setup. Source: almost 3 years ago