Installation

You can install the JFrog Visual Studio Extension from the Visual Studio Marketplace, connect it to your JFrog Platform, and, in Visual Studio 2022, set a scan policy.

Install the JFrog Visual Studio Extension

Install the listing that matches your Visual Studio version:

Visual Studio versionMarketplace listing
Visual Studio 2022JFrogV2
Visual Studio 2017 and 2019JFrog

To install the extension in Visual Studio 2022:

  1. Open Visual Studio 2022.
  2. Go to Extensions > Manage Extensions.
  3. Click Browse.
  4. Search for JFrogV2.
  5. Select JFrog V2.
  6. Click Download.
  7. Close Visual Studio to finish the installation, then reopen it.

The JFrog extension appears under installed extensions after Visual Studio restarts.

To install the extension in Visual Studio 2019:

  1. Open Visual Studio 2019.
  2. Go to Extensions > Manage Extensions.
  3. Click Online.
  4. Search for JFrog.
  5. Select the JFrog extension.
  6. Click Download.
  7. Close Visual Studio to finish the installation, then reopen it.

The JFrog extension appears under installed extensions after Visual Studio restarts.

To install the extension in Visual Studio 2017:

  1. Open Visual Studio 2017.
  2. Go to Tools > Extensions and Updates.
  3. Click Online.
  4. Search for JFrog.
  5. Select the JFrog extension.
  6. Click Download.
  7. Close Visual Studio to finish the installation, then reopen it.

The JFrog extension appears under installed extensions after Visual Studio restarts.

Connect the Extension to the JFrog Platform

After installation, connect the extension to JFrog Xray.

Visual Studio 2022 (JFrogV2) can authenticate with a user and password or with an access token. Visual Studio 2017 and 2019 (JFrog) support only Xray URL, User, and Password. Single sign-on (SSO) and JFrog CLI auto-detected credentials are not supported in this extension.

To connect the extension in Visual Studio 2022:

  1. Open Visual Studio 2022.
  2. Go to Tools > Options > JFrog > JFrog Xray.
  3. Enter your JFrog Platform URL. The extension fills Artifactory URL and Xray URL from that value.
  4. If Artifactory and Xray use different URLs, select Set Artifactory and Xray URLs separately, then enter each URL.
  5. Select Basic Auth or Access Token.
  6. Enter your User and Password, or enter your Access Token.
  7. Click Test Connection.

A successful test shows the Xray and Artifactory versions. If the test returns unauthorized, check the credentials. If the test returns forbidden, grant the user permission to view components in Xray.

To connect the extension in Visual Studio 2017 or 2019:

  1. Open Visual Studio.
  2. Go to Tools > Options > JFrog > JFrog Xray.
  3. Enter your Xray URL, User, and Password.
  4. Click Test Connection.

If you use a proxy, set HTTPS_PROXY, then restart Visual Studio. The extension ignores Visual Studio and Windows proxy settings.

Configure Scan Policy

Scan policy is available in Visual Studio 2022. Visual Studio 2017 and 2019 do not include this setting.

Scan policy controls whether the scan returns all vulnerabilities or only findings that match a JFrog Project or Xray Watches.

To set a scan policy in Visual Studio 2022:

  1. Go to Tools > Options > JFrog > JFrog Xray.
  2. Select one of the following:
    • All vulnerabilities: Scan without a project or Watch filter.
    • According to project: Enter the JFrog Project key.
    • According to Watches: Enter Watch names, separated by commas.
  3. Click OK.

Did this page help you?