JFrog Artifactory and Xray
The JFrog Platform application for Slack allows your team to keep your software development teams connected to your binary management and artifact workflows. As a leader in DevOps, JFrog’s integrations allows your team to get notifications about Artifactory and Xray events and take actions leading to better productivity. With this integration, users will have situational awareness about occurrences in Artifactory and Xray that are of interest to them and their teams at all times.Today there are key events throughout the JFrog Platform that are best viewed in Slack. Features include: • Users will be able to chat about specific incidents
• Share active notifications with other team members
• Directly download artifacts
• Setup Xray notifications with aggregate card view
• Add Xray Ignore rules
• Artifact Property notifications
• Action buttons to respond to events directly.
• Docker Tag, Builds, and more notifications!Admin Features: • Configure the JFrog instance
• Create notifications
• Delete or Pause notifications
• Create different types of Xray notifications
• Share active notifications with other team members
• Directly download artifacts
• Setup Xray notifications with aggregate card view
• Add Xray Ignore rules
• Artifact Property notifications
• Action buttons to respond to events directly.
• Docker Tag, Builds, and more notifications!Admin Features: • Configure the JFrog instance
• Create notifications
• Delete or Pause notifications
• Create different types of Xray notifications
Permissions
JFrog Artifactory and Xray will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
JFrog Ltd.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
JFrog will retain data for the period necessary to fulfill the purposes outlined in our Privacy Policy or where the customer agreement requires or permits specific retention or deletion periods, unless a longer retention period is required or permitted by law.
Data archiving and removal policy
JFrog deletes customer data within 60 days upon customer request, or upon termination of customer agreement. JFrog does not have any obligation to retain any data following the termination or expiration of the agreement/services. Please visit our Trust Page (https://jfrog.com/trust/data-management/) to learn more about our data management processes.
Data storage policy
JFrog uses managed object storage and databases from the major cloud providers. Each customer has their own unique role with permissions to their own data. Customer data is stored in the hosting provider's data centers and in the hosting regions chosen by our customers. All hosted data at rest is securely stored in a database and object storage using 256-bit AES encryption.
Data hosting company
AWS
App/service has sub-processors
no
Certifications & compliance
SOC attestation
ISO/IEC-27001 certification
GDPR commitment
Data deletion request procedure
A commercial customer account is typically deactivated after being inactive for 60 days or 30 days after the end of its current subscription period. If the customer does not reach our support team, we delete its data completely.
A Free tier account is typically deactivated after being inactive for 21 days. After 7 days all its data will be deleted from JFrog SaaS solution.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
security@jfrog.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
yes
Uses token rotation
no