How to configure Real Time Processing for JFrog Binary
In order to configure Real Time Processing in MetaDefender Software Supply Chain you will need to go to Inventory and click on a valid JFrog Binary service connection. There you can see a button that says Start RTP.
Start a Real-Time Scan
Go to Inventory and select your JFrog Binary service connection, then click Start Job:
In the New Job panel, select the repositories you want to monitor and switch to the Real-Time Scan tab. Choose a custom workflow - the Webhook URL is generated once the workflow is selected. Copy it, then click Create:
The Real-Time job appears in the Active Jobs table on the Jobs page and keeps running while the repositories are monitored:
How to use Webhooks
Go to your JFrog instance → Administration → General Management → Webhooks → New Webhook
Fill the necessary details by giving a name, the URL will be the generated URL from MetaDefender Software Supply Chain, select a compatible event type (in this example, we use
copy artifact event) and also add a custom header including the API Key:
Note: For JFrog Container connections, we currently support the Docker and OCI -> Tag was pushed event type.
When you add an event, a form from which to choose the repositories will appear. Here, choose the one which you generated the webhook from:
After everything is settled, click
Createand the new webhook will be added to the list:
Now, when an artifact is copied into the selected repo, a scan will be automatically triggered.