Détectez et traquez les Vulnérabilités

qui se cachent dans vos dépendances

@JulienTopcu

#DevSecOps @DependencyTrack

Julien Topçu

Sr Lead Dev

@JulienTopcu

https://beyondxscratch.com/

julien.topcu@owasp.org

@JulienTopcu

#DevSecOps @DependencyTrack

@JulienTopcu

#DevSecOps @DependencyTrack

https://github.com/DependencyTrack/dependency-track

https://github.com/jeremylong/DependencyCheck

@JulienTopcu

#DevSecOps @DependencyTrack

Demo

@JulienTopcu

#DevSecOps @DependencyTrack

@JulienTopcu

#DevSecOps @DependencyTrack

This slide Works on localhost only!

@JulienTopcu

#DevSecOps @DependencyTrack

CVE-2016-3720

@JulienTopcu

#DevSecOps @DependencyTrack

Jackson-Release-2.7.4

@JulienTopcu

#DevSecOps @DependencyTrack

@JulienTopcu

#DevSecOps @DependencyTrack

Dependency-Track slide Works on localhost only!

@JulienTopcu

#DevSecOps @DependencyTrack

JENKINS slide Works on localhost only!

@JulienTopcu

#DevSecOps @DependencyTrack

You have critical security vulnerabilities in your software but you don’t know it yet!

https://medium.com/@julien.topcu

Thank You !!!

@JulienTopcu

#DevSecOps @DependencyTrack