The article presents how to store and analyse Software Bill of Materials with OWASP Dependency-Track to identify security vulnerabilities in open-source components. It guides how Dependency-Track can be deployed in a production environment and summarises pros and cons of this platform.