JFrog Security (Xray) - JFrog Xray Security Scanning and Management
Scan artifacts and builds for vulnerabilities, manage security policies and watches, and monitor runtime security
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- scan artifacts
- scan builds
- create policies
- list policies
- create watches
- list violations
- create ignore rules
- generate vulnerability reports
- scan source code
- scan IaC files
- list clusters
- list workloads
- monitor runtime threats
Inputs
- access token
- artifact path
- build name
- build number
- policy name
- watch name
- violation filters
- vulnerability name
- repository name
- source code
- IaC file
- Kubernetes cluster
- container
Outputs
- vulnerability summary
- policy configuration
- watch configuration
- violation list
- ignore rule confirmation
- vulnerability report
- cluster list
- workload list
- runtime threat alerts
Requirements
- JFrog URL
- JFrog access token
- JFrog CLI 2.100.0+ (recommended)
- Advanced Security subscription (for JAS features)