Stack Overflow
Stack Overflow

Questions tagged [jfrog-xray]

Use this tag for questions related to JFrog Xray

133 questions
1
vote
2 answers

Jfrog X-RAY API not working for "Get Reports List"

Following reference Xray REST API - GetReportList Below example returns - {"error":"Failed to parse request pagination params"} ## Get Reports List curl -s --request POST \ --user 'svc_api_xray':$(cat ~/secrets/.svc_api_xray | base64 --decode) \ …
Paul Maxfield
  • 11
  • 3
1
vote
2 answers

How to ignore one vulnerability in JFrog Xray

I am using JFrog Xray to scan for security issues in my project. There is a vulnerability issue CVE-2016-1000027 with critical level need to resolve. But I want JFrog ignore this vulnerability issue when Xray scan. Anyone who know how to help me…
Einz
  • 55
  • 9
1
vote
1 answer

Jfrog Xray Helm deployment failing on Azure Kubernetes Serivice

I have deployed Artifactory on Azure Kubernetes Service using the official Jfrog chart: https://github.com/jfrog/charts/tree/master/stable/artifactory Then I tried to deploy Xray using the chart:…
Prashant Shetage
  • 167
  • 1
  • 3
  • 16
1
vote
1 answer

xray newbie- first docker scan from cli

I'm starting with JFrog Xray. I created an account on JFrog cloud platform using my Github credentials. I created an identity token for authentication. I have a linux box with only terminal (No GUI). In that I downloaded a project from Github and…
Arnab
  • 2,324
  • 6
  • 36
  • 60
1
vote
1 answer

Is it possible to create a scheduler on JFrog Xray?

Is it possible to create a scheduler on JFrog Xray that generates report at specified interval?
Hemal
  • 124
  • 1
  • 13
1
vote
2 answers

JFrog Xray is very slow on the initial DB sync

I'm trying to execute an initial DB sync for Xray to an external (Azure) PostgreSQL database. It ran acceptedly for about an1.5 hrs., and then froze up at 90% (something to do with IOPS limits on Azure PG Database) after pushing about 50 G.B into…
Michael Rudd
  • 13
  • 2
1
vote
1 answer

How to fetch SHA_256 value from manifest.json file in JFROG

I am trying to fetch the SHA_256 value from manifest.json file but unable to get using aql. Below is the cmd I am using: ubuntu@test:~$ **curl -sS -u sumkumar:$pw -XPOST -k -H "Content-type: text/plain" https:///artifactory/api/search/aql -d…
dell xps
  • 41
  • 5
1
vote
1 answer

Artifactory X-ray Database sync got stuck at "calculating"

My artifactory, x-ray, and database services are up and running while i am doing online database sync it got stuck at 99% and not moving forward. And I have restarted the database sync again. Still database sync is stuck at calculating state. please…
Sandeep
  • 11
  • 2
1
vote
1 answer

JFrog XRay analyzing the wrong version

My application uses Maven to build, and among its dependencies are LibA and LibB. Both of them in turn depend on the same library, com.thoughtworks.xstream:xstream, but LibA depends on version 1.4.16 and LibB depends on 1.4.8. When I run mvn…
Tom Panning
  • 4,613
  • 2
  • 26
  • 47
1
vote
2 answers

How to resolve issues in pom due to transitive dependencies

I am working on a task to remove issues identified by JFrog plug-in that identifies the entries in the POM by risk category - high, medium etc. In my POM, I am getting the red squiggly lines for these entries and I am trying to figure out the cause…
adbdkb
  • 1,897
  • 6
  • 37
  • 66
1
vote
1 answer

X-ray scanning not finishing in Jenkins pipeline

I am trying to scan a build with Jfrog xray, but the scan does not finish. Instead it remains idling. My pipeline stages are configured like so stage('Publish'){ steps { rtPublishBuildInfo ( serverId :…
Evan Gertis
  • 1,796
  • 2
  • 25
  • 59
1
vote
1 answer

Can JFrog Xray scan only Maven artifact?

Can JFrog Xray be used to scan Maven artifact directly? All examples and resources I can find shows only Xray scanning Docker Images where it also scans layer with java application and its dependencies. But can one scan Maven artifact directly even…
RenatoIvancic
  • 1,798
  • 3
  • 21
  • 36
1
vote
1 answer

Read Jfrog Artifact's X-Ray Report from CLI

I have to read Jfrog Artifact X-ray report. On console the report can be seen under Artifactory-> Artifacts-> (Choose specific Artifact) ->X-ray I want to read the same report from CLI for which i am not able to get the cli command. Can someone…
Chaitanya Vats
  • 41
  • 1
  • 5
1
vote
2 answers

How to get Jfrog Xray scanArtifact result using API

I am doing a artifact scan using Xray post API https://artifacts.org/xray/api/v1/scanArtifact In response I get below { "info": "Scan of artifact is in progress" } How do I get the result of this scan ,is there a API for this ?
Umesh Kumar
  • 1,387
  • 2
  • 16
  • 34
1
vote
0 answers

RHSA-2020:1454 - Security Advisory

I am building a docker image for my Java application using rhel7:7.7 as base image. There is a high criticality issue found by JFrog Xray when scanning the image "Red Hat Security Advisory: Satellite 6.7 release."…
Delong
  • 11
  • 1
1
2
3
…
8 9