Hi.
My name is Matt Kendall,
and welcome to this Security Architecture and Engineering
Tools course featuring the open source tool,
Dependency‑Check, maintained by the OWASP group.
With open source components now present in over 95% of commercial applications,
today, the overwhelming majority of code that we use and
ship is code that we didn't write.
Answering the question of how we secure this vast software
supply chain has never been more important.
This course is an introduction to both the software composition
analysis process and the OWASP Dependency‑Check tool.
No prior experience with either is required.
If you're involved in software engineering or application security at any level,
then this course is for you.
Some of the major topics we'll cover are what software
composition analysis tools are and how they can help
identify our software supply chain,
how to install and use OWASP Dependency‑Check,
and how we can configure it for optimal results.
We'll see realistic demos covering a bunch of different technology types,
and we'll look at best practices for remediating vulnerable components and
for integrating dependency scanning into your workflow.
By the end of this course,
you'll know everything you need to start managing your project's
software supply chain with Dependency‑Check.
I hope you'll join me on this journey to learn Supply Chain
Risk Management with OWASP Dependency‑Check,
here at Pluralsight.