ServiceNow customers can now leverage JFrog Xray violations for on-call management, collaboration, and incident response.
This integration allows Lightstep to get security and license compliance data that will automatically alert your development teams and allow them to prioritize which issues to respond to. Additionally, this information can be leveraged by Lightstep’s platform of tools for observability and automation.
The continuous growth in use of open source software (OSS) components, exposes code bases to potential hidden vulnerabilities and license compliance violations. JFrog Xray is the Software Composition Analysis (SCA) tool that monitors and provides insights into your (OSS) packages regarding security and compliance. It is an integral part of the JFrog DevOps Platform, and is now natively integrated with ServiceNow Lightstep, which organizes all your security alerts, routes issues to teams based on criticality, and allows teams real-time information about the safety of your applications. By taking the best of both solutions you can achieve security, compliance and traceability for your software artifacts.
When a security vulnerability or license issue is detected in any GO package, Xray analyzes how it affects all other artifacts in your component graph and displays the impact chains in your organization, ensuring that your software services and applications are safe and compliant.