search

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.7k stars 578 forks source link

Github advisory button not active #1701

Open bret99 opened 2 years ago

bret99 commented 2 years ago

Github advisory button not active after updating to newest version by replacing old .jar files to new .jar files.

nscuro commented 2 years ago

The button is inactive until you provide a personal access token (PAT). This is intentional to drive the point home that GHSA requires authentication. If the button is not clickable even after setting a PAT, then it's a bug.