Company
Date Published
Author
Daniel Miakotkin
Word count
1029
Language
English
Hacker News points
None

Summary

JFrog Xray, a universal software composition analysis (SCA) tool, can now be added to a self-managed Artifactory deployment on Microsoft Azure via the Azure Marketplace. This integration allows developers and DevSecOps teams to identify open-source vulnerabilities and license compliance issues before deploying applications, using Xray's deep recursive scanning capabilities across all major package types, including Docker images and ZIP files. To set up Xray, users need an active Azure subscription, available vCPUs, an Xray license, and an Artifactory Enterprise deployment on Azure, along with a recommended Azure PostgreSQL service for indexing vulnerability data. The installation involves using an Azure Resource Manager (ARM) template to deploy an Azure PostgreSQL service, configuring Xray with the database, and setting up a virtual machine for Xray within the same virtual network as Artifactory, followed by connecting Xray to the database and completing the deployment through Azure Marketplace. Once deployed, users can manage repositories and receive alerts for potential security issues, enhancing their DevSecOps practices.