JFrog Xray Scan Results: Fundamentals and triage workflow

Course Level: Intermediate

Requirements: Working knowledge of JFrog Xray and familiarity with how your organization's security policies and CI/CD pipelines are configured.

Prerequisites: None. Completion of JFrog Xray Overview, JFrog Xray Policies and Watches and JFrog Xray Indexing or equivalent hands-on experience with Xray is helpful but not required.

Course Description:
Most teams open a scan result, head straight for the unfiltered list of vulnerabilities, and get overwhelmed by the noise. That is the wrong place to start.

Topics Covered:

• Understanding Scan Output: Discover how Xray produces three distinct output layers, the SBOM, Vulnerabilities, and Policy Violations—and why only one of them should serve as your team's daily action list.
• The Triage Workflow: Follow a consistent, step-by-step navigation process for any scan result across any resource type. Learn how to isolate malicious packages immediately before methodically working down through prioritized policy violations.