GitHub and JFrog Collaborate to Streamline DevSecOps Processes

In a significant move to enhance DevSecOps practices, GitHub and JFrog have announced a new partnership. This collaboration is set to enable developers to manage both code and binaries more efficiently across two of the most widely used developer platforms globally, according to The GitHub Blog.

Integration for Improved Efficiency

As code volumes continue to grow exponentially, the collaboration between GitHub and JFrog aims to alleviate the burden on software developers, DevOps engineers, and security specialists. By integrating their platforms, the two companies hope to streamline processes and reduce the complexity of managing code and binaries.

Currently, 50% of JFrog’s customers already use GitHub as their primary code repository. The new integration promises to offer seamless navigation and traceability between source code and binaries, leveraging CI/CD capabilities through GitHub Actions and JFrog Artifactory. This unified platform aims to provide developers with a single dashboard for managing their code, security findings, and innovations, effectively eliminating the need for context switching.

Key Features of the Partnership

The partnership introduces several key features designed to enhance the developer experience:

• Single Sign-On (SSO): Manage access and roles with SSO across both platforms, centralizing user identity and access management.
• Artifact Lifecycle Tracking: GitHub Actions integrated with JFrog Artifactory for better tracking and metadata inclusion in stored artifacts.
• Bidirectional Linking: Link software packages and code bidirectionally to enhance compliance, security, and traceability.

Gerard McMahon, Head of ALM Tools and Platforms at Fidelity Investments, emphasized the importance of this integration, stating, “The integration between JFrog's Software Supply Chain Platform and GitHub's Developer Platform provides a 'secure by default' developer experience, offering a single source of truth for code and binaries.”

Future Developments

Looking ahead, GitHub and JFrog plan to further integrate their security offerings to provide a comprehensive view of software supply chain security. Additionally, they aim to incorporate JFrog functionalities into GitHub Copilot Chat, allowing developers to query about JFrog processes and artifacts directly within Copilot.

John Nuttall, Director of Technology at AT&T, highlighted the potential impact of this collaboration, noting, “Chatting with GitHub Copilot to select the right and secure software package based on extensive metadata stored in JFrog Catalog can be a game-changer.”

Getting Started

For those interested in exploring the new integrations, GitHub and JFrog are offering a joint webinar. This event will showcase the capabilities of the unified platform and demonstrate how it can enhance the software development lifecycle.

Enterprises around the world are seeking solutions that provide robust security, management, and operational capabilities. The partnership between GitHub and JFrog represents a significant step towards meeting these needs, promising to drive modern development forward.