From the Frog's mouth

JFrog Xray Integration with AWS Security Hub

July 26, 2022 Alex Hung, Sr. Software Developer & Daniel Miakotkin, Software Engineer | 5 min read

SecOps demands vigilance, but it requires visibility, too. With JFrog’s latest integration for Xray with AWS Security Hub, you can help make sure that discovered vulnerabilities are not just seen, but quickly acted on. AWS Security Hub is the cloud security posture management service available to AWS users. It provides central security administration across AWS…

Self-Hosted or SaaS, JFrog Has You Covered

July 25, 2022 Rakesh Krishna, JFrog Solution Engineer | 7 min read

Freedom of choice can make choosing harder. Since a JFrog cloud (SaaS) account provides the same features as a self-hosted JFrog DevOps Platform how will you decide which is right for you? Choice without tradeoffs is one of the key ways JFrog enables you to be cloud nimble, and run the mission-critical heart of your…

7 Ways to Accelerate Cloud Native Development

July 21, 2022 Gianni Truzzi | 7 min read

Modern enterprises understand the need to move away from developing monolithic applications to ones that make best use of the cloud to enable business acceleration at scale and speed. That means transforming development to more resilient cloud native architectures that can be readily deployed to cloud, multi-cloud, and hybrid environments. What does it mean to…

How To Put Cloud Nimble to Work to Shift Left Security

July 20, 2022 John Cabaniss, Strategic Solutions Architect and Gianni Truzzi | 6 min read

Shifting security left means preventing developers from using unacceptably vulnerable software supply chain components as early as possible: before their first build. By helping assure that no build is ever created using packages with known vulnerabilities, this saves substantial remediation costs in advance. Some JFrog customers restrict the use of open source software (OSS) packages…

Continuous Training and Deployment for Machine Learning (ML) at the Edge

July 13, 2022 Juha Kiili, Technical Writer & Senior Software Developer at Valohai
Michael Vakulenko, Senior Product Manager at JFrog | 7 min read

Running machine learning (ML) inference in Edge devices close to where the data is generated offers several important advantages over running inference remotely in the cloud. These include real-time processing, lower cost, the ability to work without connectivity and with increased privacy. However, today, implementing an end-to-end ML system for edge inference and continuous deployment…

Testing resiliency against malicious package attacks: a double-edged sword?

July 12, 2022 Andrey Polkovnychenko | 13 min read

The JFrog Security research team continuously monitors popular open-source software (OSS) repositories with our automated tooling to avert potential software supply chain security threats, and reports any vulnerabilities or malicious packages discovered to repository maintainers and the wider community. At times, we notice trends that are worth analyzing and learning from. Recently, we’ve noticed a…

Team Up on DevSecOps with JFrog Platform App for Microsoft Teams

July 11, 2022 Deep Datta and Karol Harezlak | 4 min read

The JFrog DevOps Platform is your mission-critical tool for your software development pipelines. The results of key binary management events in Artifactory, Xray, and Distribution can reveal whether or not your software pipelines are on-track to deliver production-quality releases. The new JFrog Platform app for Microsoft Teams brings real-time visibility and awareness of what’s happening…

Creating your first Pub project with JFrog Artifactory

July 6, 2022 Batel Zohar | 7 min read

Developers today need to build software from many platforms in order to reach their users. All while maintaining quality and achieving the best user experience possible. This can be a challenging task when you need to meet the growing needs of software development. This is where the Dart and Flutter come into the picture. A…

CVE-2022-30522 – Denial of Service (DoS) Vulnerability in Apache httpd “mod_sed” filter

June 28, 2022 Brian Moussalli | 8 min read

This past March we posted an analysis of a vulnerability in the Apache HTTP Server mod_sed filter module, CVE-2022-23943, in which a Denial of Service (DoS) can be triggered due to a miscalculation of buffers’ sizes. While analyzing this Apache httpd vulnerability and its patch, we suspected that although the fix resolved the issue, it…

Part I: A Journey of a Thousand Binaries – Types of Software Dependencies

June 22, 2022 Ixchel Ruiz, Developer Advocate | 7 min read

TL;DR We use software dependencies as part of our ongoing daily work. In part one of this series, we’ll take a look into what dependencies are, why we use them and the tools we can use to manage them and gain trust in our software supply chain. Software Dependencies Dependencies are artifacts that enable applications…

Welcome to the JFrog Blog

Latest:

Recapping Yalla! DevOps 2022

FILTER BY

Products

Solutions

Other