G2

Saravanan C.

Technical Architect

Enterprise (> 1000 emp.)

12/1/2020

"Deep X-ray Security scan for Open Source libraries based on vulnerabilities & licences."

4.5/5

What do you like best about JFrog?

X-ray is a free add-on tool with Artifactory which has the capability to scan the open-source or custom libraries. The scan is performed based upon vulnerabilities and license levels. X-ray has the feature of configuring quality gateways and the CI/CD build can be broken based on the quality gates. X-ray can be scanned on the build or repository level. X-ray scans the binary post publishing in the Artifactory or we can explicitly trigger the scan as a stage in the CI/CD pipelines. Review collected by and hosted on G2.com.

What do you dislike about JFrog?

We have to think about X-ray microservices instances running in the same host where Artifactory runs. By this way, we can avoid the latency between the JPD platform where the Artifactory runs with the X-ray executing in a remote instance. Can X-ray scan Microsoft libraries? Review collected by and hosted on G2.com.

What problems is JFrog solving and how is that benefiting you?

X-ray can be implemented and enforced in the development environment by installing the X-ray Eclipse plugin in the developer's workspace. Hence, developers can perform X-ray scans in their DEV environment before moving the library to the repository and in the CI/CD pipeline. Even if a developer misses the scan, the CI/CD can scan the binary. X-ray is an eye-opener for custom libraries, and proper license standards can be defined for the custom libraries. Review collected by and hosted on G2.com.