JFrog has announced new products and closer integration with GitHub at its annual conference, SwamUp.

JFrog provides an end-to-end DevOps platform for the software supply chain and has over 7K customers worldwide, including the majority (85%) of the Fortune 100.

SwampUP was held this year in Austin, Texas, and JFrog made several announcements to delegates, starting with JFrog Runtime, a new security solution that JFrog says delivers "software integrity and lineage from code to cloud". JFrog Runtime is designed to enable fast discovery of vulnerabilities and to help remediate security incidents in runtime environments where applications are already serving customers.

JFrog Runtime can be used to analyze containers such as Kubernetes in cloud environments. It is integrated with JFrog Artifactory, and lets teams monitor clusters, identify and remediate vulnerabilities, verify image integrity, and ensure compliance with industry standards.

Because the software continuously monitors runtime applications and services, and compares current information to what normally happens, unusual activity can be identified so teams can identify and respond to unauthorized actions, privilege escalations, and other potential incidents.

JFrog also announced integration of GitHub version control and collaborative features with JFrog's artifact management and security scanning.  JFrog says the integration includes navigation and traceability between source code and binaries, CI/CD with GitHub Actions and JFrog Artifactory, and a unified view of security findings across the software supply chain.

The integration includes the ability to use GitHub Copilot chat extension for selecting which software packages have been updated, approved, and marked as safe for use.

JFrog also announced they are integrating the NVIDIA Inference Microservices (NIM) with JFrog Platform and JFrog Artifactory model registry.  JFrog Artifactory is now a proxy for NVIDIA NGC, centralizing the management of NIM images and models within the JFrog Platform in dedicated remote repositories. This setup allows NIM images to source models from Artifactory, instead of from NGC. The JFrog team says this provides an AI command center for centralized management that means teams can manage models like any other artifact. The integration also means teams can bundle ML models with dependencies in Artifactory, reducing external dependencies, and can carry out continuous security checks across containers, models, and dependencies. 

JFrog Runtime is available now. 

More Information

JFrog Webpage

Related Articles

JFrog Reveals The Popularity Of Software Technologies

JFrog Releases Conan 2

To be informed about new articles on I Programmer, sign up for our weekly newsletter, subscribe to the RSS feed and follow us on Twitter, Facebook or Linkedin.

Comments

Make a Comment or View Existing Comments Using Disqus

or email your comment to: comments@i-programmer.info