OWASP Dependency-Check
Official docs outline
- CLI
Running Dependency-Check from the command line.
- CLI Arguments
Flags for output formats, failing builds on CVSS and data sources.
- Maven Plugin
Maven integration for software composition analysis.
- Gradle Plugin
Gradle integration and configuration.
- Analyzers
File type analyzers and evidence collection for CPE identification.
- Suppressing False Positives
Suppression files for false positives and known-accepted vulnerabilities.
- Data and Cache
Vulnerability data sources, local database and update behavior.
- NVD Cache and Mirroring
Caching NVD data and avoiding rate limits.
- How It Works
Evidence, CPE matching and CVE correlation internals.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.