Advanced Security Policies

Security policies define rules based on security criteria, triggering automatic actions when the conditions are met. JFrog Xray enforces these policies when you apply them to Watches in JFrog Xray. You can create policies that focus on specific types of violations based on your security requirements.

JFrog Advanced Security lets you enhance existing and newly created Policies in JFrog Xray with Exposures detection and Contextual Analysis rules.

Policy Types

You can create the following Advanced Security policies:

• Create a Contextual Analysis Policy
• Exposures Policy
• Create a SAST Policy
• ML Model Policy

View Policy Violations

You can view violations in:

• The Scans List
• The Watch Violations page

Advanced Security Policy APIs

The following REST APIs support Advanced Security policies:

• Create Policy
• Get Policy

Contextual Analysis APIs

The following REST APIs support Contextual Analysis:

• Get Contextual Analysis per Vulnerability
• Artifact Summary
• Build Summary
• Get Violations
• List Ignored Violations
• Scan Build V1
• Get Repositories Configurations
• Update Repositories Configurations

Exposures Scanning APIs

The following REST APIs support Exposures Scanning:

• Exposures Scanning-Get Results List
• Exposures Scanning-Get Results Details
• Exposures Scanning-Get Findings
• Exposures Scanning-Get Evidence
• Exposures Scanning-Get Rows
• Get Repositories Configurations
• Update Repositories Configurations