Initiate Advanced Scans

When you enable JFrog Advanced Security for the first time, JFrog Artifactory doesn't scan existing repositories and artifacts automatically. You must manually trigger scans for the repositories and artifacts you want to analyze.

After you set up advanced scans, they apply only to newly added artifacts and run as ongoing, recurring scans. However, you can also trigger one-time scans for an immediate, on-demand security analysis of your artifacts, containers, or codebases without waiting for scheduled scans.

For more information about initiating and configuring ongoing and one-time advanced scans, see Enable Advanced Scans for Repositories and Enable Advanced Scans for Artifacts. Those scans detect:

• Vulnerabilities through Contextual Analysis
• Service risks
• Secrets exposure
• Application security issues

The following REST APIs support Advanced Security Repository and Artifact actions:

• Repository Advanced Scans
• Get Repository Advanced Scan Status
• Cancel Repository Advanced Scans
• Scan Artifact for Contextual Analysis
• Scan Artifact for Exposures

Related Topics

• Configure Advanced Security
• Enable Advanced Scans
• Misconfigurations Scans