Xray Archives

JFrog Gives You DevSecOps in the Cloud, for the Cloud

November 27, 2018 Jens Eckels | 3 min read

You may have seen that we recently released a new version of JFrog Xray, along with releases of Mission Control and Artifactory. But one thing we’re super excited about is that this release train showcases that Xray is, for the first time, available in a pure cloud, SaaS model. Now you get to enjoy all…

JFrog Xray Drills Deep Down into Your Docker Images

November 7, 2018 Ori Yitzhaki | 3 min read

JFrog offers end-to-end Docker security covering the full lifecycle of your images to manage development, vulnerability analysis, license compliance, artifact flow control, and distribution. JFrog Xray has access to the wealth of metadata Artifactory stores. Combined with deep recursive scanning, it puts Xray in a unique position to analyze the relationships between the different layers in…

Five Ways to Meet Deadlines When Developing with NPM

October 15, 2018 Rami Honig | 8 min read

Node.js has risen to be the most popular development technology in use today. Don’t take my word for it, you can look at Stack Overflow’s 2018 survey. And if that’s not enough for you, pop into www.modulecounts.com and see how packages in public open source npm registries outnumber those from any other technology by a…

Discoveries and a Release Management Plugin from JFrog

September 11, 2018 Jainish Shah | 6 min read

This is a repost of the original that was recently published as a guest post on the Atlassian blog. My time at Atlassian’s Bitbucket Cloud Dev Week proved to be very fulfilling, and not just for the cool code we produced. I’m excited about that too, of course. Using Bitbucket Cloud’s V2 APIs, I was…

Get Your License Compliance Reports with a Click of a Button

September 5, 2018 Elad Yaakov | 4 min read

When releasing software, one of the key aspects you need is ensuring that you’re compliant and safe from any legal risks. Our previous blog post on DevOps and Compliance described how compliance can be a seamless part of the DevOps workflow in your organization. This blog post will address the way your company is enforcing…

Top 10 Reasons Why You Need JFrog Enterprise+

August 16, 2018 Ibrahim Rahmani | 6 min read

UPDATE: JFrog Mission Control and Insight is sunset and will not be supported as of EoQ2 '25 release. More and more companies rely on software to provide value to their customers through product or service updates, websites, mobile apps and more. Whether large or small, these companies can be in any industry segment such as…

Delivering Shift-Left Security with NeuVector and JFrog Xray

August 1, 2018 Elaad Yaacov | 5 min read

Bringing Kubernetes app security insights to developers This post is co-authored by Craig Peters of JFrog and Henrik Rosendahl of NeuVector and is also cross-posted on the NeuVector blog. Kubernetes, the container and orchestration tool favored by enterprises, provides great benefit in automating many aspects of application deployment at scale. But, like any emerging technology,…

You have Docker; Now are your Docker images secure?

August 8, 2018 Ibrahim Rahmani | 7 min read

This is the second blog in our series on Docker. In our initial blog called You have Docker; Now what?, we discussed the reasons for using a universal binary repository when implementing Docker to production with confidence. It’s great that you're using Docker, but managing security vulnerabilities is vital to ensuring your Docker environment is free…

Xray Policies: Govern Your Software Supply Chain with Ease

July 25, 2018 adia | 4 min read

In modern software, there are many important aspects to governing software. You no longer only care for the quality of your own code, but also care for the quality, security, integrity, legal and other aspects of the open source packages that you use. The knowledge of how to handle the risks in these quality domains…

Containerize Node Microservices Using Atlassian Bitbucket Pipeline and JFrog CLI

June 21, 2018 Jainish Shah | 8 min read

Did you know? Atlassian provides tools to help development teams more effectively collaborate and deliver software fast. Atlassian introduced Bitbucket Pipelines in 2016 to automate continuous integration in a seamless way with the git repository. As Bitbucket Pipelines has matured we’ve seen more of our customers taking advantage of its ability to easily integrate CI/CD…

Welcome to the JFrog Blog

Latest from Xray :

GitHub and JFrog Partner To Unify Code and Binaries for DevSecOps