> Integration > Xray Docker Security Scanning

JFrog +

JFrog offers an end-to-end solution covering the full lifecycle of your Docker images to manage development, vulnerability analysis, artifact flow control and distribution.

WHAT JFROG AND DOCKER INTEGRATION MEANS TO YOU

Deep Recursive Scan Through All Layers of a Docker Image

Impact Analysis

JFROG
ARTIFACTORY

Continuous Analysis

Fully Integrated with Your CI/CD Pipeline

Fully Automated Security Scanning

Deep Recursive Scan Through All Layers of a Docker Image

Xray does not stop at your Docker image base layer. It recursively peels away the different layers and their dependencies ensuring that every software artifact that is included in your Docker image has been scanned for issues and vulnerabilities.

Impact Analysis

When a vulnerability is detected, Xray shows you all the Docker images that contain the infected artifact so you can instantly understand the impact that any vulnerable layer has on all Docker images in your system.

Continuous Analysis

Even when images uploaded to your Docker registries in Artifactory are given a clean bill of health, Xray continues to scan them to make sure they are not infected with any new vulnerabilities that are registered with Xray’s global vulnerability database.

Fully Integrated with Your CI/CD Pipeline

Through Xray’s integration with common CI servers, you can stop infected builds from ever getting to your repositories. During the build process, Xray will notify your CI server if an infected artifact is being included in your Docker image so the build can be halted before completion.

Fully Automated Security Scanning

Through its extensive REST API, Xray lets you set up a fully automated security scanning protocol. Manage all aspects of component security with automated control over Users, Permissions, Watches, Components, Integrations and more.

Release Fast Or Die