Company
Date Published
Author
Asaf Gabai, Software Engineer, JFrog Ecosystem Team
Word count
482
Language
English
Hacker News points
None

Summary

Red Hat OpenShift serves as an enterprise Kubernetes container platform, enabling the creation and deployment of Docker images in a cloud-like environment. These images can be seamlessly integrated into JFrog Artifactory, a universal repository manager, to facilitate build metadata recording using JFrog’s SBOM format, which includes modules, artifacts, and dependencies crucial for identifying code vulnerabilities. To utilize this feature, users need a JFrog subscription, along with the installation of JFrog CLI version 2.4.0 or above, and OpenShift CLI version 3.0.0 or above. The process involves logging into the OpenShift environment, creating a credentials secret for secure Artifactory access, modifying the BuildConfig YAML in OpenShift, and configuring the JFrog CLI with platform details. Once set up, users can build images, collect build-info, and publish it to Artifactory, with additional capabilities such as scanning for security vulnerabilities and license compliance available through JFrog CLI. The JFrog CLI project is open-source, welcoming community contributions via its GitHub repository.