# JFrog Artifactory

JFrog Artifactory is a universal artifact repository manager. It is designed to store, manage, and distribute binaries and artifacts produced during the software development process. These artifacts can include compiled code, libraries, dependencies, Docker images, and more.

### Usage of JFrog Artifactory in Delivery Shield

The following are the uses of integrating JFrog artifactory with Delivery Shield:

* JFrog artifactory notifies each pipeline execution to Delivery Shield. It identifies the image for every build and connects Delivery Shield to the the artifactory repo to pull the newly built image. 
* Delivery Shield connects with the Artifactory repo, and pulls the images and runs the security scans on them. The scanned results are available in the [Vulnerability Management](https://docs.opsmx.com/opsmx-secure-software-delivery-ssd-platform/user-guide/vulnerability-management) page, **Artifact** section of the [DBOM](https://docs.opsmx.com/opsmx-secure-software-delivery-ssd-platform/user-guide/delivery-bill-of-materials-dbom) page.
* JFrog artifactory helps in collecting metadata such as Artifact SHA to perform the artifact integrity checks and ensure security in the supply chain. The collected information is populated in the DBOM page for audit purposes. 

### To Integrate JFrog:

1. Navigate to **Config** > **Integrations**.
2. In the Artifact panel, click on **JFrog Artifactory**.

<figure><img src="/files/2j8Nw9VT7oLeNMzJ07MJ" alt=""><figcaption></figcaption></figure>

3. The JFrog Artifactory integration page is displayed. Click **+New Account**.
4. In the popup that appears, enter the following details:

<figure><img src="/files/vuINWqME1Q6oZSpJ2NFH" alt=""><figcaption></figcaption></figure>

* **Account Name -** Enter the name of the user docker account.&#x20;
* **Repository Url -** Enter the Url of the approved artifact repository from which the images are deployed.  Security issues are raised by SSD if you try to deploy images from a different repository.&#x20;
* **Username -** Enter the username to access the docker account.&#x20;
* **Password -** Enter the password to access the docker account.&#x20;
* Select the **Teams** and the corresponding **Environments** from the dropdown for which you want the integration to be available. The integration will be available for the selected teams and environment only.&#x20;

  <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>You can select up to 5 teams for the integration to be displayed. </p></div>

  * An example is given below for reference:

  <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeuMZQzZsZQuulVdW9B9OuffNPoEXqbcpcAkYtKVyb7YiTQxbVIt1L4Gh-zshqX2J9MFKIat8x4oWFIGxdg3j1XVagyUNhUAlD_52soyMyd1cy53p6XiYi0LsTjIBfHcybRWl61?key=D9EXoOdGF7oYOBvYaW2GnRWJ" alt=""><figcaption></figcaption></figure>

  * In the example above,&#x20;
    * if **Team 1**, **Team 2**, and **Team 3** are selected, only applications associated with these teams can access the integration. Any applications belonging to other teams, such as **Team 4**, will not have access to this account.
    * Even if the user who created this account is also an admin for **Team 4**, the integration account remains restricted and is not available for **Team 4**.&#x20;
    * Access to the account is strictly limited to the specified **Teams** and **Environments** selected during account creation.
  * **For Organization Admins:**
    * When an **Organization Admin** creates an account without selecting specific **Teams** and **Environments**, the account will be universally applicable, granting access to **all teams** and **all environments** by default.
  * **For Team Admins with Multiple Teams:**<br>
    * If a **Team Admin** who manages multiple teams creates an account without specifying particular **Teams** and **Environments**, the account will only be accessible to the teams for which the logged-in user holds admin privileges.

5. Click **Save**. The JFrog atrifacory account gets added.&#x20;
6. You can edit the entered values by clicking the three dots provided at the end of each added account. Click **Edit**.
7. Enter the new values and click **Update**.&#x20;

The new values get updated.&#x20;

<br>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.opsmx.com/ssd/security-risk-and-prioritization/getting-started/integrating-ci-and-cd-tools-in-delivery-shield/jfrog-artifactory.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.