The SCANOSS GitHub Actions integration has been extended to support Dependency Track.
This update lets you:
– Convert scan results into CycloneDX SBOMs – Upload results as artifacts – Apply Dependency Track policies directly in the workflow
The same capabilities are also supported in theSCANOSS Python CLI:
scanoss-py export dt scanoss-py ins dt
Repo → https://github.com/scanoss/gha-code-scan