Xray Archives

Follow the Data: A Hidden Directory Traversal Vulnerability in QNX Slinger

August 11, 2020 Asaf Karas and Ilya Khivrich | 7 min read

Through our ongoing device security analysis, we often uncover—and responsibly disclose—new unknown vulnerabilities in both closed and open source software components used in connected devices. In this blog post, we discuss a directory traversal vulnerability that we recently discovered while analyzing the firmware of a device based on the BlackBerry QNX operating system. First, here’s…

Best Practices for Onboarding JFrog Xray

August 4, 2020 Eran Blumenthal | 5 min read

Note: A version of this blog post is also published on dev.to Introducing, adding, or replacing a new SCA (Software Composition Analysis) tool such as JFrog Xray into your SDLC, if not handled correctly, can be very disruptive to the SDLC and organization. This blog post provides recommended best practices for onboarding JFrog Xray; in…

Track JFrog Platform Performance with Datadog Analytics

July 20, 2020 Mahitha Byreddy | 6 min read

Faithful operation of your JFrog Platform can be best assured by tracking usage data of Artifactory and Xray. With insights gained through real-time observability and log analytics, you can boost the efficiency of your DevOps pipeline and keep your software releases running joyfully. Datadog is a SaaS-based data analytics platform that is a popularly used…

Unified JFrog Platform Monitoring With Prometheus and Grafana

July 13, 2020 Jeff Fry | 5 min read

Running the JFrog DevOps Platform on Kubernetes in your enterprise can mean serving millions of artifacts to developers and customers each day. But operating at top performance requires being able to answer some vital questions. Like what is the most requested artifact? What is the most popular repo? Who are your heaviest users? For security,…

Stretch Your Reach with Unified JFrog Data and Elastic

July 6, 2020 Mahitha Byreddy | 7 min read

DevOps teams rely on Artifactory as the bread and butter tool of universal binary repo managers, but observing its operations can be challenging. With multiple high availability nodes and unification with Xray as the JFrog DevOps Platform, that operations data is spread out across logs for each service in the JFrog Platform deployment. Operations…

AWS CodeArtifact vs. Artifactory: Which Should You Choose for Binary Management?

June 25, 2020 Avigail Ofer | 10 min read

Update: This blog post has been updated to reflect product offerings as of July 16, 2021 Since the inception of JFrog - with OSS Artifactory - we’ve been adamant that you simply cannot deliver software with any type of scale, speed, or reliability without a robust artifact management solution. Now, over a decade later, other…

Official JFrog Ansible Collection for Artifactory & Xray

June 24, 2020 Jeff Fry | 4 min read

Ansible has become one of the most popular tools used by operations teams to automate their IT tasks. It allows them to quickly, and at the largest enterprise scale, manage the configuration of their IT systems. This includes software and infrastructure on-premise and in the cloud. Its open-source roots has allowed it to grow a…

Make DevSecOps So: Cloud Enterprise+ on AWS Marketplace

August 21, 2020 Doug Hartley | 4 min read

JFrog is pleased to announce that our comprehensive Cloud Enterprise+ plan is now available on Amazon Web Services (AWS) Marketplace. JFrog Cloud Enterprise+ on AWS is a universal, highly-available SaaS offering of the JFrog Platform for demanding DevSecOps at global scale. Its Mission: DevSecOps at Enterprise Scale The JFrog Platform is built for start-to-finish, “one-stop…

A Smooth Operator to Run JFrog Enterprise on OpenShift

May 28, 2020 John Peterson | 5 min read

Red Hat OpenShift and JFrog Artifactory are a smooth fit together for cloud-native, containerized software development at enterprise scale. With the new availability of OpenShift operators certified for JFrog Enterprise, that fit now fastens tight. Catch us live with Red Hat to learn more. Join us for a live session January 21st, 10:30AM PST or…

Unified JFrog Log Analytics With Splunk

May 26, 2020 John Peterson | 6 min read

We work best by coming together. That’s why we built the JFrog DevOps Platform, bringing together our set of solutions to operate as a single, unified user experience. That unity powered by Artifactory 7 helps bring total understanding and control of your software build pipelines. To keep it running, you also need a unified, real-time…

Welcome to the JFrog Blog

Latest from Xray :

How to Connect the JFrog Platform to Your GitHub Environment to Create a Seamless Integration