MetaDefender Software Supply Chain v2.2.0 introduces integration with JFrog Artifactory. This integration enables AppSec and SecOps teams to enhance the security and efficiency of their CI/CD pipelines. Now customers can scan packages and artifacts from a JFrog Artifactory server, both cloud-based and on-premises.
Address Evolving AppSec Challenges
Modern software supply chains are becoming more complex – leveraging open-source third-party software libraries to lower total cost of ownership, integrating CI/CD tools, shifting left on both software development and cybersecurity. However, this approach has introduced more intricacies and complexities in managing the software development stack. Handling the security aspect – managing all software components such as artifacts and libraries – is an important yet often overlooked component of application security. Open-source third-party software, despite its benefits, can also become blind spots and a target for threat actors to exploit software supply chains.
The integration of OPSWAT's MetaDefender Software Supply Chain with JFrog Artifactory addresses and helps mitigate these AppSec challenges. This combination ensures efficient artifact management while eliminating the risks of software malware and vulnerabilities. AppSec and SecOps teams gain visibility into potential risks, including malicious software packages and critical vulnerabilities.
A Fast and Centralized Platform to Track and Remediate Vulnerabilities
By integrating MetaDefender Software Supply Chain with JFrog Artifactory, teams can gain visibility into threats and vulnerabilities in their software development lifecycle (SDLC) while maintaining efficient artifacts management. This integration ensures that all software components within JFrog Artifactory are thoroughly scanned for vulnerabilities and malware.
With this joint solution, AppSec and SecOps teams can achieve:
- Visibility into Threats: Gain a singular view of software supply chain risks to improve decision-making and proactive risk management to ensure compliance with internal policies and industry standards.
- Enhanced Overall Security Posture: Enforce rigorous security checks on artifacts before distribution or deployment. MetaDefender Software Supply Chain conducts comprehensive scans for malware, vulnerabilities, hardcoded secrets, and compliance issues.
- Operational Efficiency: Streamline security assessments within the artifact repository workflow. This integration seamlessly incorporates security measures into the development cycle.
- Comprehensive Threat Detection: Multiple layers of defense technologies provide different types of threat detection and provide detailed insights into malicious packages and vulnerabilities.
Multi-Layered Technologies to Secure Your Software Supply Chain
Advanced Malware Detection
Leverage more than 30 anti-virus engines for powerful, multi-layered coverage against malicious software packages.
Secret Detection
Identify and prevent credentials such as API keys, passwords, secrets, tokens, and other types of sensitive information hardcoded into your source code.
Software Bill of Materials (SBOM) Generation
Automatically generate SBOMs to gain complete visibility into the components within your software, ensuring compliance and enhancing transparency.
Automatically generate SBOMs to gain complete visibility into the components within your software, ensuring compliance and enhancing transparency.
Other Features in MetaDefender Software Supply Chain v2.2.0
- Branch Configuration for Source Code Scanning: Configure non-default branches in your workflows for scanning source code. Perform customized scans by scanning different branches than those configured in your workflow.
- Tag Configuration for Container Scanning: Customize container scans using specific tags, providing flexibility and targeted security assessments.
- GitHub Enterprise Support for Source Code Scanning: Expanded support includes GitHub Enterprise (on-premises), alongside existing support for GitHub Cloud.
About MetaDefender Software Supply Chain
OPSWAT MetaDefender Software Supply Chain provides expanded visibility and a robust defense against supply chain risks. With our zero-trust threat detection and prevention technologies, your SDLC is protected from malware and vulnerabilities, strengthening application security and compliance adherence.
Release Details
- Product: MetaDefender Software Supply Chain
- Release Date: 15 July 2024
- Release Notes: 2.2.0
- Download from OPSWAT Portal
For more information, talk to our cybersecurity experts.
