--- title: "Jfrog Xray" slug: "jfrog-xray" updated: 2025-03-25T14:14:22Z published: 2025-03-25T14:14:22Z canonical: "docs.databee.buzz/jfrog-xray" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Jfrog Xray Jfrog Xray software composition analysis (SCA) solution natively integrates with Artifactory, giving developers and DevSecOps teams an easy way to proactively identify vulnerabilities on open source and license compliance violations. More information can be found at [Jfrog Xray](https://jfrog.com/help/r/get-started-with-the-jfrog-platform/jfrog-xray). **Integration Method:** API **Tables**: Vulnerability Finding (2002) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Artifact Summary | Fetches Vulnerabilities found in artifacts scan. | This integration supports the following versions. | Jfrog Xray Version | [Cloud version 3.114.6](https://jfrog.com/help/r/xray-release-information/xray-release-notes) | | --- | --- | | Jfrog Xray API version | v1.0 | ## Prerequisites - Access to the Jfrog portal with an account that has the Global Administrator privileges. Portal URL looks like https://.jfrog.io/. - Access to the DataBee console. ## Configuration Overview 1. Generate a Access token with the required scope to access API. 2. Add the [Jfrog Xray](/user-manual/docs/jfrog-xray#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **Jfrog Xray Parameter** | | --- | --- | | API Base URL () | hostname | | Token | Access Token | ## Jfrog Xray Configuration 1. Login to Jfrog portal. 1. Copy the instance URL as shown below. This is the hostname required by DataBee during configuration. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-5ewxfdkk.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 2. Once logged in, click on **Administration.** ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-0uvlyi3w.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 3. From left side panel, click on **User management** > **Access Tokens** then click **Generate Token** on the top right. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-nyk2hp1z.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 4. Select **Scoped Token**, fill ‘Description’ field and choose User from ‘Token Scope’ dropdown. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-m3tcfo1f.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 5. Select the username from dropdown for which access token need to be generated. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-qqbg8fpe.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) > [!NOTE] > Note: > > This is least privilege scope. Users will be part of readers group by default, please ensure that user for which token is generated is part of readers groups. Please [refer](https://jfrog.com/help/r/jfrog-platform-administration-documentation/manage-users) for detailed user management guideline. 6. Uncheck All checkbox and choose **Xray** from ‘Service’ dropdown. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-qsrpgth8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 7. Choose **Never** from ‘Expiration time’ dropdown and click on **Generate**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-32s3zpkk.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 8. Copy the token and keep it safe since it can't be retrieved later. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-nhvuj1gv.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-18hnbq2j.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 2. Search for the **Jfrog Xray** and click it as shown below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-9fcu7ser.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-4skwe1q2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-xhrnsrh2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 5. In the configuration page, confirm the following: - Authorization Method: Bearer Token - API Base URL: this is the base URL that DataBee will interact with. Replace placeholder with your organization instance name. - Token: paste the **Access Token** generated earlier - Event Types: preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/jfrog-xray-mar2025-image-ewzanzw8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 6. Click **Submit**. ## Troubleshooting Tips - Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token by following jfrog configuration steps, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed. - Ensure the scope is set as required, minimum users level scope is needed.