Scan the build using the Xray:

Artifactory: How to build and publish a Nuget project using the JFrog CLI to Artifactory and how to scan it and what to expect after it is scanned by JFrog Xray

AuthorFullName__c
Swarnendu Kayal
articleNumber
000005166
ft:sourceType
Salesforce
FirstPublishedDate
2021-11-17T14:09:29Z
lastModifiedDate
2024-03-10T07:49:12Z
VersionNumber
7

1. Add the build to the indexed resource -

User-added image

2. If the build is not indexed run the Rest API as mentioned on this confluence page with the below payload -

{
   "artifactory_id": "artifactory_saas",
   "builds": [
       {
           "name": "NugetTest",
           "number": "1"
       }
   ]
}

 

3. Create the policy and the rules using this link - https://www.jfrog.com/confluence/display/JFROG/Creating+Xray+Policies+and+Rules

4. Create the watch and add the repository, build, policies and rules using this link - https://www.jfrog.com/confluence/display/JFROG/Configuring+Xray+Watches

5. Once the build is added, trigger the history scan as shown below - 

User-added image

6. The builds or the packages should automatically be scanned as soon as it is indexed. Please follow this KB - https://jfrog.com/knowledge-base/xray-how-to-index-and-scan-all-builds-in-xray-in-the-unified-platform/ in order to index and scan all builds in Xray.