Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/jfrog/jfrog-idea-plugin

JFrog IntelliJ IDEA plugin
https://github.com/jfrog/jfrog-idea-plugin

golang gradle intellij-idea intellij-plugin jfrog jfrog-idea-plugin jfrog-xray maven npm vulnerability

Last synced: about 1 month ago
JSON representation

JFrog IntelliJ IDEA plugin

Host: GitHub
URL: https://github.com/jfrog/jfrog-idea-plugin
Owner: jfrog
License: apache-2.0
Created: 2017-07-02T08:01:50.000Z (over 7 years ago)
Default Branch: master
Last Pushed: 2024-09-25T08:48:10.000Z (about 2 months ago)
Last Synced: 2024-09-27T05:04:35.964Z (about 2 months ago)
Topics: golang, gradle, intellij-idea, intellij-plugin, jfrog, jfrog-idea-plugin, jfrog-xray, maven, npm, vulnerability
Language: Java
Homepage: https://jfrog.github.io/jfrog-idea-plugin/
Size: 4.29 MB
Stars: 199
Watchers: 7
Forks: 34
Open Issues: 35
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE

Awesome Lists containing this project

README

[![](readme-resources/readme_image.png)](#readme)

# JFrog IntelliJ IDEA Plugin

![JFrog IntelliJ IDEA Plugin Marketplace Installs](https://img.shields.io/jetbrains/plugin/d/9834-jfrog?label=Marketplace%20installs&color=blue&style=for-the-badge)

[![Scanned by Frogbot](https://raw.github.com/jfrog/frogbot/master/images/frogbot-badge.svg)](https://github.com/jfrog/frogbot#readme)
[![Build status](https://github.com/jfrog/jfrog-idea-plugin/actions/workflows/test.yml/badge.svg)](https://github.com/jfrog/jfrog-idea-plugin/actions/workflows/test.yml)
[![Marketplace](https://img.shields.io/jetbrains/plugin/v/9834-jfrog)](https://plugins.jetbrains.com/plugin/9834-jfrog)

# 🤖 About this Plugin

The plugin allows developers to find and fix security vulnerabilities in their projects and to see valuable information
about the status of their code by continuously scanning it locally with [JFrog Security](https://jfrog.com/xray/).

### What security capabilities do we provide?
#### Basic

Software Composition Analysis (SCA)
Scans your project dependencies for security issues and shows you which dependencies are vulnerable. If the vulnerabilities have a fix, you can upgrade to the version with the fix in a click of a button.

CVE Research and Enrichment
For selected security issues, get leverage-enhanced CVE data that is provided by our JFrog Security Research team.
Prioritize the CVEs based on:

- **JFrog Severity**: The severity given by the JFrog Security Research team after the manual analysis of the CVE by the team.
CVEs with the highest JFrog security severity are the most likely to be used by real-world attackers.
This means that you should put effort into fixing them as soon as possible.
- **Research Summary**: The summary that is based on JFrog's security analysis of the security issue provides detailed technical information on the specific conditions for the CVE to be applicable.
- **Remediation**: Detailed fix and mitigation options for the CVEs

You can learn more about enriched CVEs [here](https://jfrog.com/help/r/jfrog-security-documentation/jfrog-security-cve-research-and-enrichment).

Check out what our research team is up to and stay updated on newly discovered issues by clicking on this link:

#### Advanced
*Requires Xray version 3.66.5 or above and Enterprise X / Enterprise+ subscription with [Advanced DevSecOps](https://jfrog.com/xray/#xray-advanced)).*

CVEs Contextual Analysis
Uses the code context to eliminate false positive reports on vulnerable dependencies that are not applicable to the code.
CVEs Contextual Analysis is currently supported for Python, Java and JavaScript code.

Secrets Detection
Prevents the exposure of keys or credentials that are stored in your source code.

Infrastructure as Code (IaC) Scan
Secures your IaC files. Critical to keeping your cloud deployment safe and secure.

#### Additional Perks

- Security issues are easily visible inline.
- The results show issues with context, impact, and remediation.
- View all security issues in one place, in the JFrog tab.
- For Security issues with an available fixed version, you can upgrade to the fixed version within the plugin.
- Track the status of the code while it is being built, tested, and scanned on the CI server.

In addition to IntelliJ IDEA, the plugin also supports the following IDEs:

- WebStorm
- PyCharm
- Android Studio
- GoLand

# 📖 Documentation

Read the [documentation](https://docs.jfrog-applications.jfrog.io/jfrog-applications/ide/jetbrains-ides) to get started.

# 🔥 Reporting Issues

Please report issues by opening an issue on [GitHub](https://github.com/jfrog/jfrog-idea-plugin/issues).

# 💻 Contributions

We welcome community contribution through pull requests. To help us improve this project, please read our [Contribution](./CONTRIBUTING.md#guidelines) guide.

# 🥏 Release Notes

The release notes are available [here](https://github.com/jfrog/jfrog-idea-plugin/releases).