enforce evidence-based policies to business applications, driving toward auditable enterprise governance and compliance workflows. Read Less >
The integration connects the JFrog Platform with ServiceNow’s change management system. It automates the creation and approval of Change Requests (CRs) in ServiceNow based on events in JFrog, like the promotion of an application version. This streamlines the release process by ensuring that all necessary approvals and evidence, such as security scans and build information, are captured and reviewed in ServiceNow before a release.
The integration links JFrog AppTrust Applications with ServiceNow DevOps Applications. This mapping is done by creating a JFrog AppTrust Applications record in ServiceNow, which maps the two entities.
Once mapped, the JFrog AppTrust application is created and updated with the relevant ServiceNow Application information. Additionally, JFrog can pull details like the application’s name, description, and business criticality from ServiceNow.
When a new AppTrust Application version is promoted to the “Pending-Approval” stage in JFrog, the integration automatically creates a Change Request (CR) in ServiceNow. This CR includes information about the release, such as the packages involved and a link to the JFrog application version. Additionally, the relevant evidence is translated into ServiceNow, and linked to the CR.
Once a Change Request is approved in ServiceNow, the integration performs two key actions:
The integration shares important evidence from JFrog with ServiceNow to support the change approval process. This includes information like scan results, build provenance (the history and origin of the build), and other software quality details. This evidence is displayed directly within the ServiceNow Change Request, providing approvers with all the data they need to make an informed decision.
