Welcome to the JFrog Blog

Take control of your Security: How to use Build-Info in your VCS to track vulnerable versions

Take control of your Security: How to use Build-Info in your VCS to track vulnerable versions

Tracking vulnerabilities and compliance requirements is essential for maintaining application security in any software project. However, this process can be time-consuming and complicated, especially as new issues are identified. Fortunately, the JFrog build-info provides a comprehensive solution by recording key information about your project's build. With build-info, you can easily track vulnerable versions of your…
Combine Copilot and JFrog Artifactory for Maximum Efficiency

Combine Copilot and JFrog Artifactory for Maximum Efficiency

Writing clean and efficient code can be time consuming, but with the right tools, it can be much easier. In this blog post, we will explore how to use Copilot for code autocompletion and JFrog Artifactory for your package management. What is Copilot? ​​GitHub Copilot is an AI-powered code auto completion tool developed by OpenAI…
Experience Partnering the JFrog Way

Experience Partnering the JFrog Way

The DevOps and security market is estimated to reach $45B in 2031 with 19.7% CAGR. Want to get a slice of the pie? At JFrog, we believe that collaboration is the key to unlocking extraordinary outcomes. Serving 89 of the Fortune 100 companies, more than half of the Fortune 500 companies, and growing rapidly with…
Addressing the npm Manifest Confusion Vulnerability

Addressing the npm Manifest Confusion Vulnerability

A potential security risk in the npm ecosystem known as "manifest confusion" has recently been spotlighted in a blog post by Darcy Clarke, a former Staff Engineering Manager at GitHub. Clarke mentioned that JFrog Artifactory seems to replicate this issue, so of course we investigated it right away. In this post, we will explain what…
The Latest JFrog Plugin for Jenkins

The Latest JFrog Plugin for Jenkins

We all know that artifact management is an important part of our development lifecycle, and if you’re using Jenkins you’ll also need to store your builds and binaries. In the world of DevOps, efficient integration and management of artifacts and dependencies are crucial for successful software delivery. Together,  Jenkins and JFrog Artifactory offer a powerful…
Got tool sprawl? Let’s consolidate.

Got tool sprawl? Let’s consolidate.

If you’re a developer, DevOps engineer, or security technician, you know the feeling of managing multiple tools at once. It’s a phenomenon so prevalent in software development that it has its own name, “tool sprawl,” and it can make it hard for teams to do their jobs efficiently. What causes tool sprawl? Problems caused by…
How a software supply chain platform streamlines DevOps best practices

How a software supply chain platform streamlines DevOps best practices

Today's software developers are tasked with a lot more than just coding. To keep up with the fast-paced software-driven economy, they need to focus on automation, collaboration, security, distribution, data analysis, and agility to ensure quality builds and get releases to customers quickly and securely. DevOps and security professionals need a centralized system of records…
From zero to breach in seconds: Why you need to focus on software supply chain security now

From zero to breach in seconds: Why you need to focus on software supply chain security now

The RSA Conference 2023 addressed several key issues and trends in the cybersecurity industry. Generative AI was a key topic of discussion, with attendees, executives and policymakers seeing its potential in both offense and defense in the cybersecurity arms race. The White House's National Cybersecurity Strategy was also a topic of conversation across panels and…