Supporting Open Source Innovation
Google intends to organize the world’s information and make it universally accessible and useful. Since the beginning, the goal of Google has been to develop services that significantly improve the lives of as many people as possible.
Supporting Open Source Developers
Together JFrog and Google offer a cloud development environment for open source developers on approved open source projects. JFrog Artifactory Pro hosted on Google Cloud Platform is available free of charge to help developers manage their OSS projects.
Additionally, JFrog and Google have partnered together to release Grafeas, an open source API sponsored by Google for storing, querying and retrieving metadata attached to software artifacts. Grafeas is integrated into JFrog Xray as well as Google Cloud Platform, where metadata about the provenance and composition of a container can be shared to inform automated policy decisions on what should or should not run in a Kubernetes cluster.
Smart, Fast Risk Assessment
JFrog’s Artifactory open source project was created to speed up development cycles using binary repositories.
Grafeas uses metadata from JFrog Xray and other screening sources to automate release decisions, matching risk level acceptance criteria to each release stage.
Share with Confidence
As developers accelerate production by using code shared through open source and third-party components, Artifactory helps track their provenance and risks. The uniform methods of the Grafeas API help share metadata about artifacts across tools for collaborative auditing and governance, including through Artifactory’s easy-to-use dashboard.
Knowledge for Safety
Open, uniform access to metadata produced by JFrog Artifactory, Xray and other screening tools helps control risks to release software with confidence, and ensures that unsafe builds don’t get deployed to production.