Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

JFrog4JFrog: DevSecOps Made Simple

jfrog.com | blog | #supply-chain | #devsecops | #jfrog | #integration

Summary

Developers simply want to write code without interruption, while operations wish to build as fast as possible and deploy without restrictions. On the other hand, security professionals want to protect every step of the software supply chain from any potential security threats and vulnerabilities. In software development, every piece of code can potentially introduce vulnerabilities…
Published
Collected

original ↗

Related coverage

blog · jfrog.com
How to Connect the JFrog Platform to Your GitHub Environment to Create a Seamless Integration
The latest JFrog collaboration with GitHub enables you to easily combine your favorite solutions for source code and binaries in a seamless integration. This means you now have a unified comprehensive and secure end-to-end experience that supports your software projects. This integration covers everything from curating open source packages, coding, CI, release management, deployment and…
blog · jfrog.com
The Agenda is Live for swampUP 2024!
The excitement is building. JFrog is pleased to announce the awesome agenda we have assembled for swampUP 2024 at the Omni Barton Creek Resort & Spa in Austin. Join us Sep 9-11 for one of the premier DevOps conferences of the year, focusing on the latest trends in software development platforms, supply chain security, OSS…
blog · jfrog.com
GitHub and JFrog Partner To Unify Code and Binaries for DevSecOps
Note: This post is co-authored by JFrog and GitHub and has also been published on the GitHub blog As the volume of code continues to grow exponentially, software developers, DevOps engineers, operations teams, security specialists, and everyone else who touches code are increasingly spending their time in the weeds of securing, delivering, and scaling software.…
blog · jfrog.com
The basics of securing GenAI and LLM development
With the rapid adoption of AI-enabled services into production applications, it’s important that organizations are able to secure the AI/ML components coming into their software supply chain. The good news is that even if you don’t have a tool specifically for scanning models themselves, you can still apply the same DevSecOps best practices to securing…
blog · netspi.com
Stealing the Artifact – JFrog Artifactory Vulnerability
NetSPI chained four JFrog Artifactory vulnerabilities, including CVE-2026-42018 and CVE-2026-69107, to bypass authentication entirely and retrieve arbitrary artifacts as an unauthenticated attacker.
incident · jfrog.com
Binary secret scanning helped us prevent (what might have been) the worst supply chain attack you can imagine
The JFrog Security Research team has recently discovered and reported a leaked access token with administrator access to Python’s, PyPI’s and Python Software Foundation’s GitHub repositories, which was leaked in a public Docker container hosted on Docker Hub. As a community service, the JFrog Security Research team continuously scans public repositories such as Docker Hub,…
back