DEVOPSdigest

JFrog introduced a new Docker Desktop Extension for JFrog Xray that allows organizations to automatically scan Docker Containers for vulnerabilities and violations early in the development process.

Available through JFrog’s free tier subscription, the new Xray integration with Docker Desktop helps increase productivity, reduce risk, and speed time-to-deployment.

“... At a time when software supply chain attacks are on the rise, we’re glad we can empower developers to have greater insight into any exposures, early, so they can engage the necessary teams for timely response and remediation – reducing downtime and avoiding loss of trust from end customers.” said Stephen Chin, VP of Developer Relations, JFrog.

The JFrog integration with Docker Desktop Extensions allows developers to:

- Monitor and audit the security of software encapsulated in Docker containers

- Identify vulnerable artifacts inside Docker containers prior to deployment and once they are in production

- Conduct enhanced forensic investigations that provide a complete view of software security incidents

- Get up and running quickly with an easy connection from the JFrog Platform to the Docker Desktop application.

“Docker is obsessed with developer ergonomics and is committed to filling and improving the developer experience gap,” said Webb Stevens, Docker’s SVP of Secure Software Supply Chain. “We welcome JFrog to the Docker Extension marketplace, expanding the applications and capabilities available for millions of registered Docker developers.”