Securing Your Software Supply Chain with JFrog Xray (JFTC 507)
This foundational course offers practical knowledge for securing the software supply chain through essential training in JFrog Xray, focusing on policy creation and developing a comprehensive Xray rollout plan, from initial configuration to full enforcement.
Designed for System Admins and DevSecOps professionals, this course provides the necessary skills to effectively manage and secure your software delivery process.
Course Level: Foundational
Requirements: Understanding of Software Development Lifecycle and basic knowledge of JFrog Artifactory
By the end of this course, you will:
- Understanding JFrog Xray impact on the SDLC.
- Create effective Xray policies.
- Identify key stakeholders for successful Xray implementation.
- Define an Xray rollout plan.
Topics Covered:
JFrog security platform play overview and SSC Security mindset
- Xray Overview: Terminology, Process, How it works
- Role based access for Xray – security role & lab/demo
- Lab: Xray Policies and Watches via UI & via API Scan artifacts, view scan results via UI
- Integrations tool (IDE plug in, CLI, Frogbot) & JFrog SBOM
- Xray best practices & Administering
- Implementation Execution Plan
- Summary - Taking it forward into the organization
Participants of the course will receive access to the recording as well as tools to support the organizational implementation process, including an execution plan and a presentation on the security mindset.