JFrog Xray / Curation
Binary Artifact Repository Security & Curated Open-Source SBOM Governance
The premier software supply chain gating engine for development organizations that rely on JFrog Artifactory to store, manage, and curate their build dependencies.
Enterprise artifact repository scanner tracking package dependencies and enforcing open-source license governance for software PDE.
Statutory Capability & Article Coverage Matrix
How JFrog Xray / Curation performs against non-negotiable statutory mandates of Regulation (EU) 2024/2847.
| CRA Legal Obligation | Statutory Reference | Tool Capability Status |
|---|---|---|
| Technical Documentation Dossier | Annex VII | Partial / Template Export |
| EU Declaration of Conformity | Annex V | No |
| Coordinated Vulnerability Disclosure (CVD) | Article 10 & RFC 9116 | No |
| 24-Hour ENISA Early Warning Dispatch | Article 14 (Active Sept 2026) | Roadmap |
| Substantial Modification Diff Engine | Article 22 | Automated Change / Diff Engine |
| Binary Firmware Disassembly & SCA | Annex I Part I (1)(a) | Source & Package Level Only |
| Air-Gapped / Island-Mode Deployment | Data Sovereignty & IP Protection | Native Air-Gapped / Island-Mode |
Architectural Fit & Deployment Analysis
Sits at the binary package repository layer. Every library, JAR, wheel, and Docker image uploaded by developers or CI runners is scanned, cataloged, and fingerprinted.
Prevents supply chain contamination. By enforcing policy gates at the package repository level, vulnerable or malicious open-source packages are blocked before they can compile into production builds.
Does not evaluate hardware security, physical interfaces, or end-to-end device network traffic. Software package security is only one component of full product conformity.
Pricing, Packaging & Total Cost of Ownership (TCO)
- Storage and data egress charges for high-volume container image repositories
Passing all JFrog Xray scans does not equal CRA compliance. Technical documentation and risk assessment remain statutory duties under Annex VII.
This Site Uses No Cookies
Eigenia does not set cookies. The only thing stored in your browser is one preference, saved in local storage, noting that you have seen this notice.