The site that you are currently viewing is a static version of the Software Factory documentation delivered with the

version v7.2.
For up-to-date documentation, see the latest version.

Secure

This section contains security implementation guides and tutorials for security tools configuration.

less than a minute

How-to perform a scan and manage projects using Black Duck SCA

Enable GitLab Container Scanning on your project to identify vulnerabilities in your Docker images.

Enable GitLab DAST on your project to scan a running web application for vulnerabilities.

Enable GitLab Dependency Scanning on your project to identify vulnerabilities in your dependencies.

Enable GitLab SAST on your project to detect vulnerabilities in your source code.

Enable GitLab Secret Detection on your project to identify secrets committed to your repository.

How to secure your GitLab repository

Learn how to generate SBOMs with JFrog CLI, JFrog IDE and Xray.

How to use JFrog Xray

How to detect, report and manage security vulnerabilities with JFrog Xray

How to scan and validate your licenses with JFrog Xray