镜像概览

完整引用
docker.io/dependencytrack/bundled
Registry
docker.io
命名空间
dependencytrack
仓库
bundled
已缓存 Tag 数
66
最近同步
07/05/2026, 10:45 PM
相关主题

简介

Dependency-Track SBOM 漏洞分析平台镜像,软件供应链安全与组件漏洞扫描,NIST CVE 关联分析。

详细介绍

dependencytrack/bundled 打包 Dependency-Track 开源 SBOM 分析平台(含内置 PostgreSQL),扫描 CycloneDX/SPDX 软件物料清单并关联 NIST CVE 漏洞库。定位为软件供应链安全 Web 平台,All-in-One 适合 PoC,生产建议拆分 API 与外接 PostgreSQL;K8s Deployment 内网 SBOM 分析。

快速启动

docker run -d --name dtrack \
  -p 8080:8080 \
  -v /data/dtrack:/data \
  docker.io/dependencytrack/bundled:latest

推荐实践

docker run -d --name dtrack \
  --restart unless-stopped \
  -p 8080:8080 \
  -v /data/dtrack:/data \
  docker.io/dependencytrack/bundled:4.11.0

核心参数说明

  • -p 8080:8080 — Dependency-Track Web UI
  • -v .../dtrack:... — 数据库与配置持久化
  • 输入 — CycloneDX/SPDX SBOM
  • 输出 — CVE 漏洞报告

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: dtrack
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dtrack
  template:
    metadata:
      labels:
        app: dtrack
    spec:
      containers:
        - name: dtrack
          image: docker.io/dependencytrack/bundled:4.11.0
          ports:
            - containerPort: 8080
          volumeMounts:
            - name: data
              mountPath: /data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: dtrack-data
---
apiVersion: v1
kind: Service
metadata:
  name: dtrack
spec:
  selector:
    app: dtrack
  ports:
    - port: 8080
      targetPort: 8080

CI 流水线上传 SBOM 至 dtrack API;Ingress 内网安全门户。

最新 Tag(20 条)

查看全部 66 个 Tag →
Tag架构推送时间大小Digest同步期望操作
docker.io/dependencytrack/bundled
:latest-alpine
linux/amd64linux/arm64
2026/05/08 00:44122.4 MBsha256:b5ea10e7234c
docker.io/dependencytrack/bundled
:4.14.2-alpine
linux/amd64linux/arm64
2026/05/08 00:44122.4 MBsha256:b5ea10e7234c
docker.io/dependencytrack/bundled
:latest
linux/amd64linux/arm64
2026/05/08 00:42170.1 MBsha256:8a340e9e6877
docker.io/dependencytrack/bundled
:4.14.2
linux/amd64linux/arm64
2026/05/08 00:42170.1 MBsha256:8a340e9e6877
docker.io/dependencytrack/bundled
:4.14.1-alpine
linux/amd64linux/arm64
2026/04/04 01:43122.5 MBsha256:693d17d13c24
docker.io/dependencytrack/bundled
:4.14.1
linux/amd64linux/arm64
2026/04/04 01:40170.2 MBsha256:be69b92c08df
docker.io/dependencytrack/bundled
:4.14.0-alpine
linux/amd64linux/arm64
2026/03/10 06:11123.9 MBsha256:f598d934801d
docker.io/dependencytrack/bundled
:4.14.0
linux/amd64linux/arm64
2026/03/10 06:08171.5 MBsha256:fbb839712e76
docker.io/dependencytrack/bundled
:feature-distro-matching-alpine
linux/amd64linux/arm64
2026/03/03 06:57123.8 MBsha256:67f97661548b
docker.io/dependencytrack/bundled
:feature-distro-matching
linux/amd64linux/arm64
2026/03/03 06:54171.4 MBsha256:f8947b3f3b8d
docker.io/dependencytrack/bundled
:4.13.6-alpine
linux/amd64linux/arm64
2025/11/17 16:50118.7 MBsha256:d2b4c26521ff
docker.io/dependencytrack/bundled
:4.13.6
linux/amd64linux/arm64
2025/11/17 16:48157.3 MBsha256:55da765a5d32
docker.io/dependencytrack/bundled
:4.13.5
linux/amd64linux/arm64
2025/10/07 22:59157.3 MBsha256:d62037629b55
docker.io/dependencytrack/bundled
:4.13.4
linux/amd64linux/arm64
2025/08/26 18:06156.6 MBsha256:a48907a52220
docker.io/dependencytrack/bundled
:4.13.3
linux/amd64linux/arm64
2025/08/04 20:57152.6 MBsha256:0a652a6c7d5e
docker.io/dependencytrack/bundled
:4.13.2
linux/amd64linux/arm64
2025/05/09 06:21152.6 MBsha256:9a26800908bf
docker.io/dependencytrack/bundled
:4.13.1
linux/amd64linux/arm64
2025/04/30 17:08152.5 MBsha256:43136fe8bd11
docker.io/dependencytrack/bundled
:4.13.0
linux/amd64linux/arm64
2025/04/07 17:37152.5 MBsha256:832971141a37
docker.io/dependencytrack/bundled
:4.12.7
linux/amd64linux/arm64
2025/03/13 06:26149.7 MBsha256:33c8a5842c28
docker.io/dependencytrack/bundled
:feature-322-scheduled-notifications
linux/amd64linux/arm64/v8
2025/03/02 23:57164.5 MBsha256:f07a24624cfb