Skip to content

Initial Startup

Upon starting Dependency-Track for the first time, multiple tasks occur including:

  • Generation of default objects such as users, teams, and permissions
  • Generation of secret key used for JWT token creation and validation
  • Population of CWE and SPDX license data
  • Initial mirroring of all supported vulnerability datasources (National Vulnerability Database, GitHub Advisories, etc)

Note

The initial mirroring may take between 10 - 30 minutes or more. Do not interrupt this process. Wait for the completion of all mirroring tasks before shutting down the system. These tasks can be monitored by watching dependency-track.log or the Docker containers console.

Default credentials

An administrative account is created on initial startup with the following credentials:

  • Username: admin
  • Password: admin

Upon first login, the admin user is required to change the password.