What packages and repositories are supported in XRay for indexing?

Joshua Han
2019-06-11 16:22

Summary

Xray can index multiple types of packages. This article explains how to find detailed list of supported types.

Resolution

Xray indexes each artifact if it has extensions that each repository type that it supports, including generic repository. The list of supported package types can be found:

  1. At Xray document page for supported technologies
  2. At Artifactory: $ARTIFACTORY_HOME/data/.cache/xray/support_types.json for details

For example, it will index and scan artifacts from a Generic repository if artifacts have following extensions shown in the list of support_types.json for 'Generic' repository type.

{"type":"generic","extensions":[{"extension":".zip"},{"extension":".7z"},{"extension":".jar"},{"extension":".jar.pack.gz"},{"extension":".apk"},{"extension":".war"},{"extension":".ear"},{"extension":".sar"},{"extension":".har"},{"extension":".hpi"},{"extension":".jpi"},{"extension":".deb"},{"extension":".rpm"},{"extension":"manifest.json","is_file":true},{"extension":".tgz"},{"extension":".tar"},{"extension":".tar.gz"},{"extension":".nupkg"},{"extension":".gem"},{"extension":".whl"},{"extension":".egg"}

'Maven' repository type has following:

{"type":"maven","extensions":[{"extension":".jar"},{"extension":".war"},{"extension":".ear"},{"extension":".7z"},{"extension":".zip"},{"extension":".tar"},{"extension":".nupkg"},{"extension":".tar.gz"},{"extension":".tgz"},{"extension":".sar"},{"extension":".har"},{"extension":".hpi"},{"extension":".apk"},{"extension":".jar.pack.gz"},{"extension":".jpi"}