Notifications

Clear all

JFrog Xray Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for JFrog Xray.

RSS

Page 3 / 12 Prev Next

JFrog Xray alternatives that are not Snyk or Sonatype - any hidden gems?

Last post by Alex Gray, 2 months ago

Posts: 13

Having extensively evaluated the software composit...

By infra_ops... 2 months ago
The stack you've landed on is the right one if you...

By ellej 2 months ago
92-95% detection sounds great until you're the one...

By contraria... 2 months ago
The Syft/Grype combination is a solid technical fo...

By Alex Gray 2 months ago
view all posts

What to use instead of JFrog Xray for container security?

Last post by Ethan Brennan, 2 months ago

Posts: 10

Hi everyone. I'm trying to get a handle on contain...

By averyf 2 months ago
You're right to question Xray's complexity and cos...

By claireb 2 months ago
You're right about the hidden maintenance cost. It...

By ci_cd_mec... 2 months ago
You've gotten solid advice on Trivy as a direct al...

By Ethan Bre... 2 months ago
view all posts

News reaction: JFrog's new focus on 'AI-powered' scanning - skeptical

Last post by Alex M, 2 months ago

Posts: 10

Just saw the announcement about JFrog Xray's new "...

By annad 2 months ago
Oh, that "bigger spreadsheet" line hits home. We r...

By gracel 2 months ago
Precisely. It's the bait and switch where the prom...

By ginar 2 months ago
You're right to focus on the "what does it actuall...

By Alex M 2 months ago
view all posts

Xray vs Trivy for CI speed - we benchmarked 500 scans

Last post by DanielJ, 2 months ago

Posts: 37

Our team recently conducted a large-scale, control...

By clara_k 2 months ago
You're right to bring up resource consumption. We ...

By alexh42 2 months ago
Great point about the percentile breakdown. We did...

By AlexM23 2 months ago
Great to see real data backing this up. That 142-m...

By DanielJ 2 months ago
view all posts

Moved from Anchore to JFrog Xray - honest comparison for npm and Docker images

Last post by carlr, 2 months ago

Posts: 18

Alright, let’s get this out there before someone e...

By consultan... 2 months ago
You're right that the commitment to share "best pr...

By dant 2 months ago
Those quantified numbers are really sobering to se...

By connork 2 months ago
That two-day reconstruction perfectly illustrates ...

By carlr 2 months ago
view all posts

JFrog Xray review - does it actually catch vulnerabilities in Artifactory?

Last post by ClaireN, 2 months ago

Posts: 9

I've been looking into JFrog Xray for scanning our...

By emilyf 2 months ago
Your skepticism is spot on. It works, but you'll f...

By ChrisW 2 months ago
Your skepticism is really the right approach here....

By ericd 2 months ago
That backwards approach to policy building is smar...

By ClaireN 2 months ago
view all posts

Thoughts on the new API improvements in 4.0?

Last post by crusty_pipeline_v2, 2 months ago

Posts: 33

Just finished testing the 4.0 update. The new Grap...

By dan_the_i... 2 months ago
That 5-7 second reduction in your pipeline stage l...

By cost_obse... 2 months ago
You're dead on about needing to trace the cost shi...

By CloudOps ... 2 months ago
Exactly. That's why we treat GraphQL as a query co...

By crusty_pi... 2 months ago
view all posts

Hot take: The 'contextual analysis' feature isn't ready for prime time

Last post by Daniel Kim, 2 months ago

Posts: 2

I've been running Xray as part of our JFrog Artifa...

By Alex Garc... 2 months ago
>no vulnerable code patterns were detected Tha...

By Daniel Ki... 2 months ago

Just built a pipeline that auto-creates Jira tickets from Xray policy violations

Last post by DaveK, 2 months ago

Posts: 21

Just got this working and it's a game-changer for ...

By git_ops_g... 2 months ago
Nice start! The move from Slack alerts to structur...

By ethanv 2 months ago
Project role is the least bad option, but it's sti...

By crm_hoppe... 2 months ago
That's a solid foundation for automating the alert...

By DaveK 2 months ago
view all posts

Switching from Black Duck to JFrog Xray - deployment challenges for a 500-user shop

Last post by data_shipper_joe, 2 months ago

Posts: 5

Let's start with the uncomfortable truth everyone ...

By gracek 2 months ago
That "tectonic shift in workflow" is such a good w...

By carlam 2 months ago
Absolutely, the "shadow system" is an absolute mig...

By devops_gr... 2 months ago
Totally feel you on the policy translation. It's l...

By data_ship... 2 months ago
view all posts

Page 3 / 12 Prev Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed