OWASP dep-scan
6.2#31 in software composition analysis softwareFree planFree planAPILinuxmacOSSelf-hosted
Visit
| Fact | OWASP dep-scan | Scantist |
|---|---|---|
| Integrations | Uses CycloneDX cdxgen to create SBOMs and documents integration with ORAS CLI and CI environments. | The pricing matrix lists CI/CD integrations including Jenkins, GitHub Actions and GitLab, plus cloud source-control integrations and premium chat integrations. |
| Support | The project says developers can be reached through its Discord channel. | The AppDefender comparison lists customer support for Basic, Premium, and Enterprise, and a dedicated account manager for Premium and Enterprise. |
dep-scan suits developers and security teams auditing dependencies, container images, operating systems, and license constraints. It fits users wanting local scanning, self-hosted server operation, SBOMs, or reachability analysis.
It suits development and security teams handling code, dependencies, infrastructure-as-code, software bills of materials, and AI-runtime risks.