Skip to content

Commit

Permalink
GITBOOK-118: change request with no subject merged in GitBook
Browse files Browse the repository at this point in the history
  • Loading branch information
linad87 authored and gitbook-bot committed Dec 24, 2023
1 parent 175fb88 commit 2982dab
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 29 deletions.
11 changes: 2 additions & 9 deletions jfrog-applications/ide/jetbrains-ides/README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# JetBrains IDEs

<img src="../../.gitbook/assets/jetbrains-ides-header.png" />
![](../../.gitbook/assets/jetbrains-ides-header.png)

## About the JFrog Plugin

Expand Down Expand Up @@ -80,14 +80,7 @@ The JFrog Plugin supports the following IDEs:

## Supported Packages

| Features | Go | Maven | Gradle / Kotlin | npm | Yarn v1 | Python | Terraform |
| ------------------------------------------------- | :-: | :---: | :-------------: | :-: | :-----: | :----: | :-------: |
| Software Composition Analysis (SCA) ||||||||
| CVE Research and Enrichment ||||||||
| Upgrade vulnerable dependencies to fixed versions ||||||||
| CVEs Contextual Analysis ||||||||
| Secrets Detection ||||||||
| Infrastructure as Code (IaC) Scan ||||||||
<table><thead><tr><th width="257">Feature</th><th>Go</th><th width="100">Maven</th><th>Gradle</th><th>npm</th><th>Yarn v1</th><th>Yarn v2</th><th>Pip</th><th>Pipenv</th><th>Conda</th><th>Poetry</th><th>.NET CLI</th><th>NuGet</th><th>Terraform</th></tr></thead><tbody><tr><td>SCA</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Contextual Analysis</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Secrets Detection</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>✅</td></tr><tr><td>SAST</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Exclude dev dependencies</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Infrastructure as Code (IaC)</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>✅</td></tr><tr><td>Autofix for direct dep.</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>License Violations</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>❌</td><td>✅</td></tr></tbody></table>

## Getting Started

Expand Down
33 changes: 13 additions & 20 deletions jfrog-applications/ide/visual-studio-code/README.md
Original file line number Diff line number Diff line change
@@ -1,44 +1,37 @@
# Visual Studio Code

<img src="../../.gitbook/assets/vscode-header.png" />
![](../../.gitbook/assets/vscode-header.png)

### About the JFrog Extension;

The cost of remediating a vulnerability is akin to the cost of fixing a bug. The earlier you remediate a vulnerability in the release cycle, the lower the cost. The extension allows developers to find and fix security vulnerabilities in their projects and to see valuable information about the status of their code by continuously scanning it locally with [JFrog Xray](https://jfrog.com/xray/).&#x20;
The cost of remediating a vulnerability is akin to the cost of fixing a bug. The earlier you remediate a vulnerability in the release cycle, the lower the cost. The extension allows developers to find and fix security vulnerabilities in their projects and to see valuable information about the status of their code by continuously scanning it locally with [JFrog Xray](https://jfrog.com/xray/).

#### What security capabilities do we provide?&#x20;
#### What security capabilities do we provide?

**Software Composition Analysis (SCA)**

Scan your project dependencies for security issues. For selected security issues, get leverage-enhanced CVE data that is provided by our JFrog Security Research team. To learn more about enriched CVEs, see [here](https://jfrog.com/help/r/jfrog-security-documentation/jfrog-security-cve-research-and-enrichment).&#x20;
Scan your project dependencies for security issues. For selected security issues, get leverage-enhanced CVE data that is provided by our JFrog Security Research team. To learn more about enriched CVEs, see [here](https://jfrog.com/help/r/jfrog-security-documentation/jfrog-security-cve-research-and-enrichment).

#### Advanced Security&#x20;
#### Advanced Security

Requires Xray version 3.66.5 or above and Enterprise X / Enterprise+ subscription with Advanced Security.&#x20;
Requires Xray version 3.66.5 or above and Enterprise X / Enterprise+ subscription with Advanced Security.

**Contextual Analysis**&#x20;
**Contextual Analysis**

With advanced Contextual Analysis, understand the applicability of CVEs in your application and utilize JFrog Security scanners to analyze the way you use 3rd party packages in your projects. Automatically validate some high-impact vulnerabilities, such as vulnerabilities that have prerequisites for exploitations, and reduce false positives and vulnerability noise with smart CVE analysis. To learn more, see [here](https://jfrog.com/help/r/jfrog-security-documentation/vulnerability-contextual-analysis).&#x20;
With advanced Contextual Analysis, understand the applicability of CVEs in your application and utilize JFrog Security scanners to analyze the way you use 3rd party packages in your projects. Automatically validate some high-impact vulnerabilities, such as vulnerabilities that have prerequisites for exploitations, and reduce false positives and vulnerability noise with smart CVE analysis. To learn more, see [here](https://jfrog.com/help/r/jfrog-security-documentation/vulnerability-contextual-analysis).

**Infrastructure as Code (IaC) Scan**&#x20;
**Infrastructure as Code (IaC) Scan**

* Analyze Infrastructure as Code (IaC) files, such as Terraform, to identify security vulnerabilities and misconfigurations before deploying your cloud infrastructure.
* Get actionable insights and recommendations for securing your IaC configurations.&#x20;
* Get actionable insights and recommendations for securing your IaC configurations.

**Secrets Detection**&#x20;
**Secrets Detection**

Detect and prevent the inclusion of sensitive information, such as credentials and API keys, in your codebase.&#x20;
Detect and prevent the inclusion of sensitive information, such as credentials and API keys, in your codebase.

**Supported Packages**

| Feature | Go | Maven | npm | Yarn v1 | PypI | .NET | Terraform |
| ------------------------------------------------- | -- | ----- | --- | ------- | ---- | ---- | --------- |
| SCA ||||||||
| Upgrade vulnerable dependencies to fixed versions ||||||||
| Contextual Analysis ||||||||
| Secrets Detection ||||||||
| Exclude dev dependencies ||||||||
| Infrastructure as Code (IaC) ||||||||
<table><thead><tr><th width="257">Feature</th><th>Go</th><th width="100">Maven</th><th>Gradle</th><th>npm</th><th>Yarn v1</th><th>Yarn v2</th><th>Pip</th><th>Pipenv</th><th>Conda</th><th>Poetry</th><th>.NET CLI</th><th>NuGet</th><th>Terraform</th></tr></thead><tbody><tr><td>SCA</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Contextual Analysis</td><td>❌</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Secrets Detection</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td>SAST</td><td>❌</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Exclude dev dependencies</td><td>❌</td><td>❌</td><td>❌</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Infrastructure as Code (IaC)</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>✅</td></tr><tr><td>Autofix for direct dep.</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>License Violations</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td></tr></tbody></table>

**Additional Perks**

Expand Down

0 comments on commit 2982dab

Please sign in to comment.