1.
1Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
The Art of Deploying
Artifacts to Production
with Confidence

2.
2Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Who Am I?
• Developer Advocate
• Passionate about
Serverless, Containers and
all things Cloud
• I love dadjokes, cheesecake
and APIsLeon Stigter, Developer Advocate
(. @LeonStigter)

3.
3Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Before We Get Into Things…
Who’s familiar with And who’s familiar with

4.
4Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter

5.
5Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Okay, One More Question!
Who’s an Optimist and believes their
code has no vulnerabilities at all?

6.
6Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Our Agenda For Today
The Art of
Deploying Artifacts
to Production with
Confidence
• What’s in my binary?
• Do you trust yourself and
your colleagues?
• How can JFrog Xray help?

7.
7Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
What’s In My Binary?
Image from: https://www.rubylane.com/item/712219-080712T101-3/Russian-Matryoshka-Doll-Set-Nesting-Dolls

8.
8Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
What’s In My Binary?

9.
9Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
What’s In My Binary?

10.
10Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
What’s In My Binary?

11.
11Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Do You Trust Yourself And Your
Colleagues?
I really hope the answer is “Yes!”

12.
12Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Do You Trust Yourself And Your
Colleagues?

13.
13Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Do You Trust Yourself And Your
Colleagues?
What about the rest of the world?

14.
14Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Do You Trust Yourself And Your
Colleagues?
98%
of developers use
open source tools at
work
96%
of commercial
applications already
use open source
software as a
component
79%
Of business
adopting Open
Source technology
for key roles

15.
15Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Do You Trust Yourself And Your
Colleagues?
But some things haven’t kept up
Security
License
Compliance
Level of
Quality
Upkeep of
versions

16.
16Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
Do You Trust Yourself And Your
Colleagues?
2.7M
Number of packages
6K
New packages per
day
30New vulnerabilities
per day
Can Should You Deal With This
Manually?

17.
17Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter

18.
18Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
How can JFrog Xray help?
Universal Native Artifactory Integration
Metadata Inside Composition and Impact Pipeline Ready

19.
19Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
How can JFrog Xray help? IDE Integration
Component Metadata
Composition Analysis
CI Integration
Policy Management
Fail Builds on Critical
Violations
Safe Distribution
Download Blocking
Production Violations
Full Impact Analysis Map
Remediation
Reports
Analytics

20.
20Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
How Does That Work?!

21.
21Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
I Need More Detail!

22.
22Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
What’s Next?
Try!
Get a full
environment at
https://try.jfrog.com
TalkCome to our booth!
Our experts are
waiting for you J
Tweet @jfrog or
@LeonStigter with
questions

23.
23Copyright © 2018 JFrog. All Rights Reserved |@LeonStigter
THANK YOU!