JFrog Xray

Scans all components, dependencies, and binaries recursively to detect vulnerabilities and license compliance issues throughout the software supply chain.

Extends scanning capabilities to machine learning models to identify vulnerabilities, malicious models, license issues, and operational risks.

Integrates natively with popular CI/CD systems like Jenkins and GitHub Actions to automate security scanning within development pipelines.

Supports scalable user and group management with SSO, SAML, SCIM, and granular RBAC permissions for secure platform-wide access control.

Enables syncing and replication of artifacts across multiple sites with one-way and bi-directional replication for distributed development environments.

Allows users to define and run automated repository cleanup policies that are logged and auditable to maintain repository hygiene.

Provides seamless integration and synchronization of roles, projects, security results, and artifact details across JFrog and GitHub platforms.

Optional integration with JFrog Advanced Security for contextual vulnerability remediation, secret detection, runtime security, and IaC scanning.