You can now integrate your JFrog Artifactory with Aikido to scan your images for known vulnerabilities.
Follow the simple steps below to activate this feature:
Step 1: In JFrog , we have to collect some data including your username and a JWT access token. The username is the value displayed in the Users table. To start, click 'User Management' on the top right.
Then, click 'Access Tokens' on the left menu:
In the top-right corner, click 'Generate token' and fill out the settings as below:
Step 2: Enter the collected data in Aikido (direct link: https://app.aikido.dev/settings/container-image-registry/add/artifactory)
Step 3: Aikido will now find all container repositories you can access and list them.
Step 4: Repositories can be linked to a code repository in order to perform better deduplication of findings. This step is optional!
Step 5: In the action menu next to the registry, click 'scan repos in registry' to get started. Results will appear in the Feed!