JFrog Security Documentation

Products: JFrog Xray
Content Type: User Guide
ft:sourceType: Paligo

JFrog Xray
Configuring Xray
General Xray Configuration Tasks
Synchronize the Database when Working with Xray
Configure Webhooks for Working with Xray
Add Custom Xray Integrations
Build the Integration Endpoints for Xray Integrations
Configure the Integration Endpoints for Xray Integrations
Create Watches and Policies for Xray
Advanced Xray Settings
Xray Garbage Collector (GC)
Indexing Xray Resources
Add or Remove Resources from Indexing
Index Artifacts History
Set a Retention Period for Xray Indexed Resources
Set Repositories Retention Period
Set Build Retention Period for Xray Indexed Resources
Xray Data Retention REST API Support
Xray Data Retention System YAML Configurations
Creating Xray Policies and Rules
Create an Xray Policy
Trigger Violations Using Xray Policy Rules
Policy Violation Automatic Actions
Edit an Xray Policy
Configuring Xray Watches
Create a Watch
Configure General Watch Settings
Assign Resources to the Watch
Set Filters on Repositories
Assign Policies to a Watch
Edit a Watch
Manually Activate a Watch
Filter Watches
Ignore Rules
Ignore a Violation
Ignore Violations Examples
View Ignore Rules and Info
Delete an Ignore Rule
Filter Ignore Rules
Search for Ignored Violations
REST API Support for Ignore Rules
Managing Compliance Licenses
Create and Edit Compliance Licenses
Edit or Add Aliases to a License
TLS Certificates
Trust Self-Signed Certificates
Secure PostgreSQL with TLS Support on Xray
Secure RabbitMQ with TLS Support on Xray
Troubleshoot RabbitMQ with TLS in Xray
Xray System Messages and Monitoring
Xray System Messages
View Xray Failure Messages
View Xray Retry Messages
Xray System Monitoring
Software Composition Analysis
How Does Xray Scan Your Artifacts?
Xray Functionality in the Application Module
Additional Xray Software Composition Analysis Functionalities
Xray Scan Results
Xray Scans List
View Xray Scans List
Understand Xray Scan Results
Search and Filter Xray Scan Results
Export Xray Scan Data
Xray Scans List REST API Support
Comparing Build Versions for Security Diff
Examine Violations on a Watch
View Watch Violations
View Watch Violation Details
Search for Watch Violations
Ignore Violations on a Watch
Analyzing Resource Scan Results
Analyze Detailed Scanned Data on Resources
Determine the Issue Severity Level for Operating Systems Packages
Severity Levels of Ubuntu Vulnerabilities
Severity Levels of Debian Vulnerabilities
Severity Levels of RPM Vulnerabilities
Xray Actions on Violations
CVSS Scoring in Xray
Xray CVSS Score and Severity
Upgrade Xray with CVSS v3 Support
Upgrade Xray with CVSS v3.0 Support in an Offline Mode
Malicious Packages
Scanning Malicious AI Models
JFrog Security CVE Research and Enrichment
CVE Research and Enrichment Benefits
View JFrog Research Enriched CVEs
CVE Research and Enrichment REST API Support
Components Operational Risk
Operational Risk Workflow
How Xray Determines Operational Risk Severity
Create Operational Risk Policy
View Operational Risk Data
Work with Operational Risk Violations
Ignore an Operational Risk Violation
Upgrade Xray with Operational Risk Feature Support in Offline Mode
Xray SBOM Report
Export SBOM Data
Xray SBOM REST API Support
Xray Reports
Xray Report Types
Create an Xray Report
Manage the Xray Reports List and Performing Actions on Reports
Xray Report Advanced Filters
Vulnerabilities Reports Advanced Filters
Due Diligence Licenses Advanced Filters
Violations Advanced Filters
Operational Risk Advanced Filters
Xray Report Scope Types
Xray Report REST API Support
JFrog Advanced Security
Set Up JFrog Advanced Security
Enable Advanced Scans
Create a Security Policy with Advanced Scans Rules
JFrog Advanced Security REST API SUPPORT
Repository/Artifact On-Demand Advanced Scan
Advanced Scans on Existing Artifact
Advanced Scans per Repository
Repository / Artifact Advanced Scan REST API Support
JFrog Advanced Security Scan Results and Post-Scan Actions
Ignore an Exposures Violation
Advanced Security Scan Results REST API Support
Vulnerability Contextual Analysis
Work with Contextual Analysis
Enable/Disable Contextual Analysis
Contextual Analysis Statuses and Results
Run Contextual Analysis on an Existing Artifact
Create an Uber JAR for Contextual Analysis
Contextual Analysis REST API Support
Exposures Scans
Working with Exposure Scans
Enable/Disable Scanning Categories
View Exposure Scan Statuses and Results
Run an Exposure Scan on an Existing Artifact
Exposure Scanning Categories
Secrets Scans
Exposure Scans REST API Support
Xray Integrations
IDE Integration
JFrog Eclipse IDE Plugin
JFrog IntelliJ IDEA Plugin
JFrog Visual Studio Extension
Xray Jira Integration
Setup Xray Jira Integration
Connect to a Jira Account
Create a Jira Configuration Profile
Configure the Jira Policy Rules
Configure the Watch with the Jira Configuration Profile
View Jira Tickets Created with Xray Integration
Xray Jira Integration REST API Support
Manual Creation of Jira Tickets
Manually Create a Jira Ticket
Jira Ticket Indicator
Manually Update a Jira Ticket
Best Practices
CI-CD Integration with Xray
Set Up Xray CI Integration
Configure Xray for CI Integration
Configure your CI Server for Xray Integration
Configure Artifactory for CI Integration
Manage Builds Scanned with Xray
Xray Dependencies Scan
Run the JFrog CLI Command for Dependency Scans
View Xray Dependency Scan Results
Xray On-Demand Binary Scan
Run the JFrog CLI Commands for On-Demand Binary Scans
View On-Demand Binary Scan Results
View Results in the JFrog Platform
Known Limitations with Xray On-Demand Binary Scans

Back to home page