Try JFrog
Guides
Contact SupportTry JFrog
  1. advanced-security
  2. Configure Advanced Security
  3. Enable Advanced Scans

Enable Advanced Scans for Repositories

Configure ongoing Xray scans for new artifacts, or run a one-time repository scan.

Configure advanced scans for a repository in one of the following ways:

Configure Ongoing Advanced Scans

Advanced Scans apply only to newly added artifacts in the repository and run as ongoing, recurring scans. You can configure them for each repository, and they don't apply to existing artifacts.

To configure ongoing advanced scans:

  1. Navigate to Administration > Xray Settings > Indexed Resources.
    Alternatively, navigate to Applications > Xray > Scans List.
  2. Select a repository or build.
  3. Click Configure.
    The Scans Configuration window opens.
  4. Under the Advanced Security category, select all or some of the following scans:
    • Vulnerabilities Contextual Analysis
    • Services
    • Secrets
    • Applications
  5. Under Scope, select:
    • Scan all artifacts to scan all artifacts currently present in the repository.
    • Scan by pattern defines a specific path in the repository.
  6. Select Scan by pattern to manage advanced scans for specific artifacts in the repository:
    • Setting path patterns
    • Setting data retention period
    • Toggling Scan on
    • Configuring All other Artifacts within the repository that are excluded from the defined scan patterns with a data retention period of their own.

Helm and Helm OCI Repositories

For Helm and Helm OCI chart repositories, you can enable JFrog Advanced Security scans for the chart repository. JFrog Xray scans the container images the chart deploys and shows the results on the chart.

For more information, see Helm and Helm OCI.

Trigger a One-Time Advanced Scan for a Repository

A one-time advanced scan gives you an immediate security analysis of your artifacts, containers, or codebases without waiting for a scheduled scan.

📘

Note

Results from one-time scans are kept for 7 days.

To trigger a one-time advanced scan for a repository:

  1. Navigate to Administration > Xray Settings > Indexed Resources.
    Alternatively, navigate to Applications > Xray > Scans List.
  2. Select a repository or build.
  3. Click Advanced Scans.
    The Advanced Scans window opens.
  4. Under Select Date and Pattern > Date and Pattern:
    • Choose Deployed in to scan artifacts that were deployed to JFrog Artifactory within a specified time range.
    • Choose Downloaded in to scan artifacts that were downloaded from Artifactory within a specified time range.
    • Choose Any time to scan all artifacts currently present in the repository.
    • Add a path pattern. Specify wildcard patterns for repository artifact paths without a leading slash. JFrog Xray supports Ant-style path expressions, including *, **, and ?.
  5. Under Select Scan Categories, select all or some of the following scans:
    • Secrets
    • Services
    • Applications
    • Vulnerabilities Contextual Analysis

Frequently Asked Questions

This section provides answers to frequently asked questions.

plusFAQs
Q: Do ongoing repository scans include artifacts that are already stored?

A: No. Ongoing scans apply only to newly added artifacts. You configure them for each repository. See Configure Ongoing Advanced Scans.

Q: How long does JFrog Xray keep one-time scan results?

A: JFrog Xray keeps results from one-time scans for 7 days.

Q: How do Helm chart repositories use advanced scans?

A: Enable JFrog Advanced Security scans on the chart repository. JFrog Xray scans the container images the chart deploys and shows the results on the chart. See Helm and Helm OCI Repositories.

Related Topics

Updated 7 days ago

Did this page help you?