-
-
Notifications
You must be signed in to change notification settings - Fork 814
OpenSep 15, 2026
No due date
•Last updated The upcoming version 5 of Dependency-Track, currently code-named project Hyades. If an issue is assigned to this milestone, chances are high it's already available in Hyades, which you can download and try out today: https://github.com/DependencyTrack/hyades
13% complete
List view
0 of 46 selected 0 issues of 46 selected
Implement Support for Project Policies
enhancementNew feature or requestNew feature or requestStatus: Open.#2130 In DependencyTrack/dependency-track;Ability to create a policy condition based on "Attributed on" value.
enhancementNew feature or requestNew feature or requestStatus: Open.#3629 In DependencyTrack/dependency-track;Make use of "Last BOM Import" as input for Policy engine
enhancementNew feature or requestNew feature or requestp3Nice-to-have featuresNice-to-have featuresStatus: Open.#2052 In DependencyTrack/dependency-track;CBOM: Add CycloneDX v1.6 support for cryptographic assets
cdx-1.6Related to CycloneDX specification v1.6Related to CycloneDX specification v1.6enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce riskStatus: Open.#3145 In DependencyTrack/dependency-track;Support CEL based Expression for Detecting Internal Components
enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risksize/MMedium effortMedium effortStatus: Open.#3910 In DependencyTrack/dependency-track;Implement EPSS Scaling (Total Threat for Component or Project or Portfolio)
enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce riskStatus: Open.#2512 In DependencyTrack/dependency-track;BOM Retention Policy
enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce riskStatus: Open.#877 In DependencyTrack/dependency-track;Version Distance Policy Evaluation Cannot Deal With Letters
defectSomething isn't workingSomething isn't workingStatus: Open.#3230 In DependencyTrack/dependency-track;Allow /api/v1/project/lookup to return project with no version
enhancementNew feature or requestNew feature or requestStatus: Open.#4914 In DependencyTrack/dependency-track;- Status: Open.#5130 In DependencyTrack/dependency-track;
Portfolio access control doesn't work when a user is member of different teams with different ACL's/projects
defectSomething isn't workingSomething isn't workingsize/XLHigher effortHigher effortStatus: Open.#5295 In DependencyTrack/dependency-track;More endpoints that use DELETE with body
defectSomething isn't workingSomething isn't workingStatus: Open.#5193 In DependencyTrack/dependency-track;Add End-of-life (EOL) / End-of-support (EOS) information for components
enhancementNew feature or requestNew feature or requestStatus: Open.#3108 In DependencyTrack/dependency-track;OWASP scores should be per-component, not global, to support contextual VEX ratings
enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce riskStatus: Open.#5796 In DependencyTrack/dependency-track;Add CEL function to check if component is a direct dependency of project root
enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risksize/SSmall effortSmall effortStatus: Open.#6184 In DependencyTrack/dependency-track;Export option on components search
enhancementNew feature or requestNew feature or requestp3Nice-to-have featuresNice-to-have featuressize/MMedium effortMedium effortStatus: Open.#6185 In DependencyTrack/dependency-track;Remove Kenna Security Integration in June 2028
enhancementNew feature or requestNew feature or requestneeds milestoneIssues or PRs that are pending a milestone assignmentIssues or PRs that are pending a milestone assignmentsize/SSmall effortSmall effortStatus: Open.#6186 In DependencyTrack/dependency-track;Extend
PluginManagerto support loading of plugins from JARsenhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risksize/MMedium effortMedium effortStatus: Open.#6187 In DependencyTrack/dependency-track;Normalize permission model
enhancementNew feature or requestNew feature or requestsize/LHigh effortHigh effortStatus: Open.#6189 In DependencyTrack/dependency-track;CBOM support
enhancementNew feature or requestNew feature or requestp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risksize/LHigh effortHigh effortStatus: Open.#6191 In DependencyTrack/dependency-track;Investigate switching to Generational ZGC
enhancementNew feature or requestNew feature or requestp3Nice-to-have featuresNice-to-have featuressize/MMedium effortMedium effortStatus: Open.#6192 In DependencyTrack/dependency-track;Offer a mechanism to bootstrap / provision a new Dependency-Track instance
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededp2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risksize/LHigh effortHigh effortStatus: Open.#6193 In DependencyTrack/dependency-track;Re-implement fuzzy analysis for internal scanner
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededp3Nice-to-have featuresNice-to-have featuressize/MMedium effortMedium effortStatus: Open.#6195 In DependencyTrack/dependency-track;Support independent policy evaluation
enhancementNew feature or requestNew feature or requestp3Nice-to-have featuresNice-to-have featuressize/MMedium effortMedium effortStatus: Open.#6197 In DependencyTrack/dependency-track;Offer an all-in-one container image for easier testing and demonstration
dxIssues related to developer experience (DX)Issues related to developer experience (DX)enhancementNew feature or requestNew feature or requestp3Nice-to-have featuresNice-to-have featuressize/MMedium effortMedium effortStatus: Open.#6198 In DependencyTrack/dependency-track;