- Print
- DarkLight
JFrog Xray is a universal software composition analysis (SCA) solution that natively integrates with Artifactory, giving developers and DevSecOps teams an easy way to proactively identify vulnerabilities on open source and license compliance violations, before they manifest in production releases.
Integration Method: API
Tables: Vulnerability Finding
Event Types: Artifact summary
JFrog Xray Configuration
This feature is supported on the Cloud (SaaS) platform with an Enterprise X or Enterprise+ license, and on the Self-Hosted platform with a Pro X, Enterprise X , or Enterprise+ license.
API URL: https://<hostname>.jfrog.io/xray/api/v1/summary/artifact.
Jfrog hostname need to be replaced in the placeholder <hostname>.
To get started, get the Access Token by logging into the JFrog platform
Navigate to User management -> Access Tokens -> Generate Token (top right). Copy the token for use during DataBee configuration.
Note:
Creating a non-expiring token will not require the data source to be updated in the future.
DataBee Configuration
Log into the DataBee console, navigate to Data and click on Add New Data Source.
Search for JFrog Xray and click it.
Select API Ingest.
Fill in basic information about the data source.
In the configuration dialog box, fill in the following:
API_URL: Replace the <hostname> placeholder with the JFrog platform hostname
Token: Paste the token generated previously in this field
Click Submit