<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>GitLab CI on Software Factory</title><link>/tags/gitlab-ci/</link><description>Recent content in GitLab CI on Software Factory</description><generator>Hugo</generator><language>en</language><atom:link href="/tags/gitlab-ci/index.xml" rel="self" type="application/rss+xml"/><item><title>SCA with JFrog Xray and Release Bundles for Maven Projects</title><link>/use/howto/ci-cd/jfrog-full-lifecycle-process/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/use/howto/ci-cd/jfrog-full-lifecycle-process/</guid><description>&lt;p&gt;This page walks through building a Maven project using &lt;code&gt;jf mvn&lt;/code&gt; instead of plain &lt;code&gt;mvn&lt;/code&gt; generating
&lt;a href="/use/practices/secure/software-composition-analysis/software-bill-of-materials/"&gt;SBOM&lt;/a&gt;
 with your packages, publishing a &lt;a href="/use/tools/artifactory/#build-info"&gt;BuildInfo&lt;/a&gt;
 to Artifactory, &lt;a href="/use/tools/xray/#scanning-artifacts-stored-in-artifactory"&gt;scanning&lt;/a&gt;
 for vulnerabillities
with Xray and &lt;a href="/use/tools/xray/#policy-management"&gt;Policy&lt;/a&gt;
 enforcement, and finally packaging everything into a &lt;a href="/use/tools/artifactory/#release-bundles"&gt;Release Bundle&lt;/a&gt;
.&lt;/p&gt;

 &lt;div class="admonition note"&gt;
 &lt;div class="admonition-header"&gt;&lt;svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"&gt;&lt;path d="M0 64C0 28.7 28.7 0 64 0L224 0l0 128c0 17.7 14.3 32 32 32l128 0 0 125.7-86.8 86.8c-10.3 10.3-17.5 23.1-21 37.2l-18.7 74.9c-2.3 9.2-1.8 18.8 1.3 27.5L64 512c-35.3 0-64-28.7-64-64L0 64zm384 64l-128 0L256 0 384 128zM549.8 235.7l14.4 14.4c15.6 15.6 15.6 40.9 0 56.6l-29.4 29.4-71-71 29.4-29.4c15.6-15.6 40.9-15.6 56.6 0zM311.9 417L441.1 287.8l71 71L382.9 487.9c-4.1 4.1-9.2 7-14.9 8.4l-60.1 15c-5.5 1.4-11.2-.2-15.2-4.2s-5.6-9.7-4.2-15.2l15-60.1c1.4-5.6 4.3-10.8 8.4-14.9z"/&gt;&lt;/svg&gt;
 &lt;span&gt;How to read this page&lt;/span&gt;
 &lt;/div&gt;
 &lt;div class="admonition-content"&gt;
 &lt;p&gt;The pipeline is built incrementally — each section adds one capability on top of the
previous one.&lt;/p&gt;</description></item></channel></rss>