DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.43k stars 529 forks source link

World Kinect has adopted Dependency Track #3810

Open aravindparappil46 opened 3 weeks ago

aravindparappil46 commented 3 weeks ago

Organization Name

World Kinect Corporation

Organization Website

https://world-kinect.com

Organization Logo (optional)

https://avatars.githubusercontent.com/u/43382006?s=400&u=c45feb70b5eeb3393b43dd1b73c729815e65b2e8&v=4

How is your organization using Dependency Track?

World Kinect Corporation (NYSE: WKC) uses Dependency-Track to continuously identify software supply chain risks and to enforce policy compliance across the portfolio.

Source Code Link (optional)

No response

Want to link blogs or videos? Share them here.

Showcase @ Dependency-Track Community Meeting

Update entry

aravindparappil46 commented 3 weeks ago

Side quip: Some other ADOPTERS.md structures that I've seen in the wild:

https://github.com/dapr/community/blob/master/ADOPTERS.md https://github.com/backstage/backstage/blob/master/ADOPTERS.md

Table format seems lesser cognitive load (and could sort markdown tables online, if needed)

nscuro commented 3 weeks ago

Good call @aravindparappil46!

I'm wondering if even keeping this in a structured file format (JSON, YAML) would be beneficial. We could generate an ADOPTERS.md file based on its contents, in a consistent format, whenever that structured file is changed.

Not only that, we could also trigger a GitHub Actions workflow in https://github.com/DependencyTrack/dependencytrack.org to update a banner of adopter logos on the website.

Thoughts?

setchy commented 3 weeks ago

That's similar to how the GraphQL Foundation landscape works: