Use this tag for questions related to JFrog Xray
Questions tagged [jfrog-xray]
133 questions
0
votes
1 answer
How to set a retention policy in JFrog Artifactory
I'm looking for a way to set retention period in JFrog Arttifactory, which will remove SNAPSHOT versions older than 100 days.
If any teams need particular files need to be keep in Artifactory forever, need to exclude some path alone in that repo…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
Jfrog Xray Violations should not occure for libraries where there is no fix version
We have set of policies (security and license) in our jfrog instance and have enabled with watchers for our builds with these policies. So we have noticed that there vulnerabilities are shown in the security and license tabs after the xray scan and…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
How to verify existence of resources and components in Jfrog artifactory
We are trying to automate the repos, group and permission creation in Jfrog as part of the azuredevops pipeline. So here I decided to use JfrogCLI and API calls as the azuredevops tasks. But facing some difficulties in Jfrog cli or API calls…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
Artifactory Permission management for specific group members
In our current Artifactory setup we have created Repos, groups and permissions per application like below
Example: For Application app-A1, we have created 2 repos(local-A1 and virtual-A1) , 2 groups(appA1-developers, appA1-contributors) and a…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
Where do I find the paths value to use with the Xray REST API - Artifact Summary call?
The XRay Rest API Artifact Summary "provides details about any artifact specified by path identifiers or checksum." The documentation ( https://www.jfrog.com/confluence/display/JFROG/Xray+REST+API#XrayRESTAPI-ArtifactSummary ) offers this…
0
votes
1 answer
Can we download the binary releases from github using Jfrog remote repo?
I am trying to download the packages of grafana from github releases using our Jfrog Artifactory instance.
The github url is :- https://github.com/grafana/k6/releases/download/v0.42.0/k6-v0.42.0-linux-amd64.tar.gz
Inorder to achieve this , I create…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
Artifactory Nuget remote repo is not resolving latest version packages
We have a Artifactory remote repo which is pointing to https://www.nuget.org/ and we are able to browse some of the packages. which are only getting downloaded to the package directory when we do the dotnet build.
For example we are getting an error…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
jfrog npm build failing
We have nodejs application and by using angular npm build we are building it with Azuredevops pipeline. Below is the build script within ADO task for the same which is working fine without any errors.
- bash: |
set -e
node…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
XRAY database sync seemingly stuck
When navigating to XRAY -> Settings -> database sync I see the below where the progress gets
5 minutes will pass and it does not go up or get any closer to completion. This is the first time that this has happened to us and am wondering what could…
Jose
- 9
- 1
0
votes
1 answer
Jfrog Artifactory repository creation and permission automation
We are using Jfrog Artifactory and looking for a way to automate the Repo, Group and permission creation for a list of items as part of a Azuredevops pipeline.
For example, I want to create a virtual Repo called "myproject-mvn-repo" with all its…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
How does Xray detect license of the Docker image? Where should I put the license information in Dockerfile?
I have built a Docker image and scanned it with Xray. Xray reports that my Docker image is missing license (the license of the Docker image itself, not the contents of the Docker image).
How should I write and where should I put the licensing…
mov
- 1
- 1
0
votes
1 answer
How to scale Artifactory for 2000-3000 users?
I have to design a public-facing Artifactory in such a way that at one time 2000-3000, Devs/DevOps might run their operations on it. And, if it increases more then it might have to scale smoothly. I am not sure how to get started with this but the…
Ravish Rawat
- 476
- 2
- 15
- 48
0
votes
0 answers
How to set AzureDevops Pipeline failure in accordance with jfrog Xray scan report
In AzureDevops server, by using Jfrog Extensions I am able to push our custom built image to Jfrog Docker-local repo as given below.
- bash: |
docker image tag myacr.azurecr.io/${{ parameters.imageName }} myartifactory/docker-repo/${{…
Vowneee
- 956
- 10
- 33
0
votes
1 answer
How to use Jfrog Debian remote repo as Ubuntu package repository?
I am working in an internet restricted environment and trying to create a docker image for my Azuredevops build agent with certain Software's installed in it. Below is the Dockerfile which I am trying to achieve and there are multiple apt-get…
Vowneee
- 956
- 10
- 33
0
votes
0 answers
Why is "log_source" field blank in logs sent to Splunk by fluentd?
Dashboards show zero log Volume in the Jfrog App for Splunk. Looking at the query in Search pane, they contain "log_source" field which is consistently blank. What field should be used and when will the JFrog app for Splunk be updated?
If this is…
CodeBunnyOne
- 1
- 1