Installing Dependency-Track in WSL2

Dependency-Track is widely used in Software Composition Analysis (SCA), a intelligent Component Analysis platform. It consumes and produces CycloneDX Software Bill of Materials (SBOM). And also, it integrates with multiple sources of vulnerability intelligence. As from the official site of Dependency-Track, it integrates:

  • National Vulnerability Database (NVD)
  • GitHub Advisories
  • Sonatype OSS Index
  • Snyk
  • Trivy
  • OSV
  • VulnDB from Risk Based Security

Installing Dependency-Track in WSL2 is easy as in common Ubuntu, as following:

1
2
3
sudo snap install docker
curl -LO https://dependencytrack.org/docker-compose.yml
docker-compose up -d

Now, everythig is done. If your network is not stable, you can try more times. Since the Dependency-Track is ready to use, you should use your WSL2 ip address as the Dependency-Track server, main is http://172.17.161.159:8080/, password will be admin:admin.