jenkinsci / dependency-track-plugin

Main repository for the official Dependency-Track Jenkins plugin
https://dependencytrack.org/
Apache License 2.0
44 stars 27 forks source link

Support uploading VEX files #271

Open aristotelos opened 2 months ago

aristotelos commented 2 months ago

Is your feature request related to a problem? Please describe.

It would be helpful if this plugin would also support uploading VEX files along with the SBOM, so that vulnerability analysis can be stored in source control as well and cloning of previous projects is not necessary anymore (which the plugin does not support, see https://github.com/jenkinsci/dependency-track-plugin/issues/66).

Describe the solution you'd like

Allow to specify a VEX artifact in the Jenkins job configuration, just like the SBOM artifact is specified.