JFrog Xray Drills Deep Down into Your Docker Images
jfrog.com | blog | #supply-chain | #vulnerability-management | #devsecops | #jfrog | #docker | #license-compliance | #artifact-scanning
Summary
JFrog Xray recursively scans all layers of Docker images in Artifactory, checking OS packages and Java dependencies for vulnerabilities and license changes, and can block CI promotions on violations.
- Published
- Collected
--- id: 6503 title: "JFrog Xray Drills Deep Down into Your Docker Images" source_domain: jfrog.com source_url: "https://jfrog.com/blog/jfrog-xray-drills-deep-down-into-your-docker-images/" published_at: "2018-11-07T07:00:08Z" tags: ["supply-chain", "vulnerability-management", "devsecops", "jfrog", "docker", "license-compliance", "artifact-scanning"] phying_url: "https://phying.com/item/6503" lang: en --- # JFrog Xray Drills Deep Down into Your Docker Images ## Summary JFrog Xray recursively scans all layers of Docker images in Artifactory, checking OS packages and Java dependencies for vulnerabilities and license changes, and can block CI promotions on violations. ## Intelligence Metadata - **Sources:** jfrog.com - **Published:** 2018-11-07T07:00:08Z - **Original:** https://jfrog.com/blog/jfrog-xray-drills-deep-down-into-your-docker-images/ - **Phying News:** https://phying.com/item/6503