UNIVERSAL
ARTIFACT ANALYSIS
JFrog Xrayは多くのパッケージタイプをサポートしているユニバーサルソリューションです。
脆弱性、ライセンス遵守、コンポーネントのバージョンなどに関する様々なメタデータのデータベースと統合されています。
他のバイナリ分析製品と違い、Xrayは、アーティファクトを特定のパッケージングに従ってブレークダウンします。Xrayはそれぞれのパッケージタイプを理解し、どのようにアンパックするか、何が下のレイヤーに含まれているかを知っています。アンパックされた各コンポーネントは個々に検証され、潜在的な脆弱性やポリシー違反を検出し、Xrayのユニバーサルコンポーネントグラフにマッピング、マージされます。このグラフは組織全体のソフトウェア構造を示しています。これにより、ソフトウェアの依存関係を視覚的にし、見つかったすべての問題のインパクトを理解することができます。Xrayは定期的にコンポーネントをスキャンすることで、持続的な保護を提供します。すでにクリーンであることが分かっている場合でも、新しく見つかった脆弱性を明らかにします。
Xray recursively opens the different layers of your Maven packages and their dependencies. When an issue is detected, Xray analyzes how it affects all other components in your component graph and displays all impact chains in your company, ensuring that your services and applications are safe. For Maven projects, bring Xray's issue discovery one step earlier, to development time, with the JFrog IntelliJ Maven Plugin. Scan your Maven project dependencies using Xray and view vulnerabilities directly from within the IntelliJ IDE.
Xray recursively opens the different layers of your npm packages and their dependencies. When an issue is detected, Xray analyzes how it affects all other components in your component graph and displays all impact chains in your company, ensuring that your services and applications are safe. For npm projects, Xray identifies each Javascript file within your npm packages and performs matching and analysis on each one to ensure that your npm application is safe to use.
Xray recursively opens the different layers of your Python packages and their dependencies. When an issue is detected, Xray analyzes how it affects all other components in your component graph and displays all impact chains in your company, ensuring that your services and applications are safe.
Xray identifies every component contained within every layer of your Docker images. This includes identifying the packages deployed on the OS in the base image layer.
Xray identifies the RPM packages deployed on your RedHat or CentOS OS that’s running on the base layer of your Docker containers. Each component is scanned for issues and vulnerabilities giving you maximum visibility into your software dependencies.
Xray identifies the Debian packages deployed on your Debian or Ubuntu OS that’s running on the base layer of your Docker containers. Each component is scanned for issues and vulnerabilities giving you maximum visibility into your software dependencies.
Xray scans NuGet packages, recursively going through the layers of dependencies to discover issues and vulnerabilities at any depth. Through a component graph that is built during the scan, Xray displays all artifacts affected by a vulnerable component or dependency anywhere in the organizations software architecture.
Xray provides radical transparency into your software architecture, recursively scanning RubyGems packages through all levels of dependency to discover issues and vulnerabilities. By running an impact analysis, Xray builds a graph of all the components in your software and determines which components are affected by an infected dependency.
XXray scans SBT packages, recursively going through all dependency layers to discover issues and vulnerabilities at any depth. By building a component graph, Xray can do an impact analysis to identify all components in your organization that are affected by a vulnerability, and monitor components for new issues and vulnerabilities that are detected.
Xray recursively scans the different layers of your Gradle packages and their dependencies. When an issue is detected, Xray analyzes how it affects all other components in your component graph and displays all impact chains in your company, ensuring that your services and applications are safe.
Xray scans Ivy packages, recursively going through dependencies to detect issues and vulnerabilities at any level. By building a dependency graph, Xray performs an impact analysis to discover all components in your organization that may be affected by an infected component.
