capabilities.work

Xray Component License Check

A 2-step recipe with JFrog. We can help you get access.

Recipe · 2 steps

Xray Component License Check

with JFrog

Cross-reference a component's Xray details with Catalog vulnerabilities.

  1. Read vulnerability and license information for the component from Xray.
  2. Fetch the same package version's known vulnerabilities from the JFrog Catalog for an independent cross-reference.
What you'll need to have ready
  • componentId: The Xray component id (e.g. npm://lodash:4.17.21).
  • packageType: The package ecosystem type (e.g. npm, maven, pypi).
  • packageName: The package name to look up in the Catalog.
  • version: The package version to check.
For your developer

Arazzo workflow jfrog:component-license-check, 2 operations: $sourceDescriptions.componentsApi.getComponentDetails → $sourceDescriptions.packagesApi.getVersionVulnerabilities. Specs on APIs.io.

More recipes with JFrog

Access Create User With GroupAccess Provision ProjectAttach Build EvidenceCleanup Stale ArtifactsConfigure Repository ReplicationCuration Policy SetupDeploy and Verify ArtifactDistribution Release BundleGrant Repository PermissionML Register Model Version