Yet Another Case for Using Exclude Patterns in Remote Repositories: Namespace Shadowing Attack
The npm Registry is vulnerable for supply chain impersonation attacks. Make sure you create npm scoped packages and force exclude patterns.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
Effective CI/CD with Github and the JFrog Platform
Are you using GitHub for your SCM and as the starting point of your delivery process? Join this webinar to learn advanced tips and tricks for simplifying and accelerating your CI/CD pipelines with the JFrog Platform on top of GitHub. Sharing a detailed demo of a real-world release pipeline triggered from GitHub, we’ll review best practices and hard-won lessons for how you can streamline your end-to-end process and ensure it meets the security and quality requirements of large-scale enterprise delivery.
Air Gap Distribution in 3 Steps
This screencast demonstrates how JFrog Distribution enables secure distribution of your immutable and signed Release Bundles to remote Artifactory or Edge nodes within an Air Gap, network-isolated environment.
Pipelines CI/CD Completes Cloud DevOps on Azure
For a complete JFrog DevOps SaaS solution hosted on Azure, the puzzle is now complete. JFrog DevOps Pipelines CI/CD is now available for all JFrog Cloud plan levels hosted on the Microsoft Azure cloud service. With Pipelines automation, now all the key elements of the JFrog DevOps Platform can be hosted on Azure as a SaaS subscription. That includes the Artifactory universal binary repository manager, and Xray software component analysis.
Into the Sunset on May 1st: Bintray, JCenter, GoCenter, and ChartCenter
JFrog is making some important changes that will impact users of Bintray, JCenter (part of Bintray), GoCenter, and ChartCenter. Bintray has provided the open source community a free, universal cloud platform for publishing and distributing binaries. Bintray helped JFrog support the Java community as the host of the JCenter repository for Java OSS libraries, packages and components. We launched GoCenter and ChartCenter to extend similar services to the Go and cloud-native communities.
Jira Cloud Integration for Artifactory
Speed your DevOps pipeline by connecting the issue tracking and repository tools you already use: JFrog Artifactory App for Jira on Atlassian Marketplace.
Stay Alert to Security With Xray and PagerDuty
When it comes to securing your software development against open source vulnerabilities, the earlier action occurs — by the right person — the safer you and your enterprise will be. Many IT departments rely on the PagerDuty incident response platform to improve visibility and agility across the organization.
Best DevSecOps Solution: DevOps Dozen 2020 Honors JFrog Xray
With so many esteemed adversaries competing in the same DevSecOps space, winning the “Best DevSecOps Solution” award feels even more special. We’re very grateful to the community and the DevOps Dozen2 judges who voted for JFrog Xray in this extremely tough category.
PagerDuty Xray Integration
When it comes to securing your software development against open source vulnerabilities, the earlier action occurs -- by the right person -- the safer you and your enterprise will be. Learn how our PagerDuty integration for JFrog Xray can help! JFrog For Security
How I Leaped Forward My Jenkins Build with JFrog Pipelines
Jenkins is the most popular open source CI tool on the market today. Being an early entry into the marketplace, Jenkins popularized CI. Like other CI tools Jenkins empowers developers to automatically build, integrate, and test code as soon as they commit it to the source repository. This allows developers to catch bugs quickly and ultimately deploy much faster.