Stack Overflow
Stack Overflow

Questions tagged [jfrog-xray]

Use this tag for questions related to JFrog Xray

133 questions
0
votes
0 answers

JFrog XRAY get violation with minimum jfrog_research_severity

I have this API request: { "filters": { "violation_type": "Security", "min_severity": "Critical", "created_from": "2023-08-22T12:22:16+03:00" }, "pagination": { …
Noam Rotter
  • 25
  • 4
0
votes
1 answer

jfrog Xray startup failure with router error " 127.0.0.1:8046: connect: connection refused"

Tried installing xray. After installation and start-up, the xray didn't work. I found the only erorr in logs. it shows localhost:8046 (routers port) cant connect. besides there is not 8046 port listening on the server. 2023-08-23T08:41:02.629Z…
janusyao
  • 1
  • 1
0
votes
0 answers

Running the Jfrog X-ray database sync from the command line

I am looking to automate the offline ruleset upgrade of jfrog Xray. Once the new ruleset upgrade files have been uploaded to the right component and vulnerability folder. Is it possible to trigger the database sync from the command line? And how…
Mars
  • 1
0
votes
0 answers

Jfrog Xray: Violation shows fix version, but still reports as violation

I recently upgraded our docker image to the fix version shown for: Upgrade To: 8:sqlite-libs - 0:3.26.0-18.el8_8 And the component shows the correct version Impacted Component: rpm://8:sqlite-libs:0:3.26.0-18.el8_8 But the violation still shows…
Ethan Lebioda
  • 1
0
votes
0 answers

Jira integration not showing labels in drop down

I have a have a cloud version of artifactory and am trying to get a jira integration setup. I have successfully authenticated to jira and am able to list the projects inside my jira account, however the labels are not showing up from the drop down.…
Ethan Lebioda
  • 1
0
votes
1 answer

Jfrog propagate GPG Signing keys for Distribution

I have to sign the release bundles I created under distribution. I generated gpg as in the jfrog document[1] and uploaded it both with the interface and with the rest API[2] but when I want to sign my release bundle, I can't see the signing key I…
Tristan
  • 68
  • 4
0
votes
0 answers

jfrog xray scan report integration with AzureDevops task

We are using Azuredevops Jfrog tasks to build our mvn/npm/gradle projectes and, using the below jfrog publish buildinfo and scan task to get the violation list. But as part of the same pipleine , we are planning for automated way (either by script…
Vowneee
  • 956
  • 10
  • 33
0
votes
0 answers

How can I resolve 'failed to parse request' error when scanning vulnerable opensources with JFrog Xray and Artifactory?

When I do JFrog Xray Scan function to the opensource that containied vulnerability, there are logs that indicate "failed to parse request,: request is missing package id". And there are no security results with vulnerabilities. I have tested some…
Suhyeong
  • 1
  • 1
0
votes
0 answers

XRay cannot parse pypi package

I have an artifact called "test" in my artifactory. The package type of that artifact is pypi. Inside that artifact I have uploaded a python package called "authentication". The structure is as…
JAYJKB
  • 95
  • 1
  • 11
0
votes
0 answers

Jfrog integration with GitHub Status Checks

I would like to have a GitHub workflow which do jfrog xray scan and integrate with GitHub status checks to determine status based on scan results? I tried to scan and retrieve scanned results based on priority. Iam trying to see away to integrate…
Kumar
  • 1
0
votes
1 answer

Jfrog Remote repository with multiple contexts paths

In jfrog remote repository, Can we have a single remote repo to resolve multiple paths of the remote repo urls? for example, I need to create a single repo in jfrog, where as all the below paths of the remote repo is accessible to…
Vowneee
  • 956
  • 10
  • 33
0
votes
1 answer

Xray JSON results Automate execution with CI CD github pipeline Flutter Dart

I have written some test cases and i wanted to execute this test result to Jira/Xray. I didnt find any dart plugin for make json and import that result with xray api within github workflow. Is there are any dart plugin or way we can achieve…
shilpa vania
  • 11
  • 1
  • 3
0
votes
1 answer

"./jfrog rt bs --rescan=true" Incorrect Usage: flag provided but not defined: -rescan

Need to rescan an already published build in Jfrog Artifactory. I am overwriting the same build name and id with a new build, but when I scan it shows me the old scan report. Which is why I need the rescan option but it's giving me the error shown…
clumsynewbdev
  • 1
0
votes
1 answer

Jfrog API to add users to group incrementally without replacing

We are trying to automate JFrog access management using Azuredevops tasks and couldn't find any working solution to update the user addition to the groups in an update passion without replacing existing users from the list. We are looking for CLI…
Vowneee
  • 956
  • 10
  • 33
0
votes
1 answer

Jfrog Xray API to retrieve reports

I'm trying to retrieve the vulnerabilities and licenses reports (ideally in .csv format) using Xray API. Before coding in groovy - trying to make it working using curl. Reading documentation, but can't find detailed explanation and useful…
Max
  • 5
  • 6
1 2 3
…
8 9