This step walks you through defining a Policy, assigning it to a Watch, selecting a repository to monitor, and running your scan!
Navigate to the Administration Module.
Click Xray | Settings under Services.
Click Indexed Resources.
Click Add a Repository and select “npm-challenge-local”, “npm-challenge-remote” repositories to indexed resources.
Define a security policy that you can later enforce in a watch.
Click Xray | Watches & Policies under Services in the the Administration Module.
In the Policies tab, create a new policy called “npm-security”, of type Security, with a rule called “npm-high-severities” set with High-Severities.
Define a watch that includes your new security policy. A watch provides context to a policy by assigning it to resources such as repositories.
Click Xray | Watches & Policies under Services in the the Administration Module.
Click the Watches tab and create a new watch called “sample-watch”, with your two repositories and your policy assigned to it by clicking Manage Policies.
Note
Watches, Policies & Rules
Policies allow us to define security and license compliance behaviors specific to your organization. Once they are defined, they are enforced by applying them to Watches. Rules define the behaviors that we want to enforce.
Run your scan by hovering over your watch and click Apply on Existing Content to trigger it manually.
Tip
The Xray scan may take some time to complete and show the vulnerabilities results. You can return to this step later to see your vulnerabilities.
View any discovered vulnerabilities by clicking on your watch.
Congratulations! You’re all set and ready to continue exploring the JFrog Platform.