How to Integrate Endoflife.Date in Dependency-Track EoL

Keeping your software up-to-date is crucial — but what happens when a library reaches end-of-life (EoL)? It stops receiving security updates, leaving your applications exposed to hidden risks. OWASP Dependency-Track is great for scanning SBOMs (Software Bill of Materials) for vulnerabilities/CVEs. But EoL dependencies, but EoL software may have unpatched vulnerabilities that aren’t reported — creating hidden risks. In this guide, I’ll show you how to set up my experimental integration for Dependency-Track and start detecting EoL dependencies from endoflife.date in your projects. Steps of this tutorial Dependency-Track installation (You can skip this if you already have a running installation) Import SBOM (You can skip this if you already have a running installation) Get the Dependency-Track API key from the Web UI Install and run the integration Step 1: Install Dependency-Track If you already have a running Dependency-Track installation, skip this step. Otherwise, the easiest way is vi