Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Why do you think that https://github.com/kubescape/kubescape is a good alternative to dependency-track