Source Code

JFrog's shift-left approach to security empowers you to catch and fix issues early, long before software reaches production. By moving security checks to the left of the development timeline, during coding, pull requests, and local builds, you can detect vulnerabilities, secrets, malware, and license risks when they're easiest and cheapest to resolve. Tools like the JFrog Security CLI, IDE plugins, and Frogbot make it seamless to integrate security into everyday workflows: scanning code and artifacts locally, surfacing issues directly in the IDE, and automating pull request reviews for dependency health.

This guide offers comprehensive instructions and best practices to help secure your software development lifecycle using:

• JFrog Security CLI
• Code security within your IDEs
• Repository scanning with Frogbot

System Requirements

The following are the system requirements for enabling security scans using the JFrog Security CLI, IDE plugins, and Frogbot.

You can use any Linux distribution. JFrog Advanced Security scanners, including Create a SAST Policy, run on Linux distributions for these architectures, including Alpine, Debian, Ubuntu, RHEL, CentOS Stream, and Amazon Linux.

Air-Gapped Environments

Air-gapped environments are physically isolated systems disconnected from unsecured networks. You use them to protect sensitive data from cyber threats, malware, and remote hacking.

Related Topics

• Products and Concepts
• Scan Your Source Code
• JFrog Xray