C
Coder.com•2mo ago
yuji.fushiguro

JFrog XRay Integration

Hope you are doing well. I have Coder deployed to EKS and I wanted to get some clarification on the Artifactory integration. The documentation makes it seems like there are 2 ways Coder can integrate with Artifactory, and they are either Jfrog-OAuth or Jfrog-Token. Right now, we went the token route because it’s the simplest. When trying to use the Coder Xray integration is fails with below error. Secondly, is there another link for the xray-integration, mentioned in the docs, because the link referenced does not exists. Is this still a feature for Coder. See in reference below 
k logs coder-xray-kube-577d77d64f-fp7k5 -n coder
2025-08-21 21:02:23.080 [erro]  scan agent  pod_name=coder-1e238610-61d2-4bb5-86bc-89b35f160a59-5cdb8fc986-tvskb  container_name=dev  container_image=artifactory.example.com/container-dsl-prod/devops-deployer-coder:workstation.stable  workspace_id=1e238610-61d2-4bb5-86bc-89b35f160a59  agent_id=3efbe722-1039-41ec-9080-99de2b03cf35  workspace_name=test-workspace ...
   error= post xray scan:
              github.com/coder/coder-xray/reporter.(*K8sReporter).Init.func2.1
                  /home/runner/work/coder-xray/coder-xray/reporter/reporter.go:121
            - POST https://coder.example.com/api/v2/integrations/jfrog/xray-scan: unexpected status code 404: Route not found.
k logs coder-xray-kube-577d77d64f-fp7k5 -n coder
2025-08-21 21:02:23.080 [erro]  scan agent  pod_name=coder-1e238610-61d2-4bb5-86bc-89b35f160a59-5cdb8fc986-tvskb  container_name=dev  container_image=artifactory.example.com/container-dsl-prod/devops-deployer-coder:workstation.stable  workspace_id=1e238610-61d2-4bb5-86bc-89b35f160a59  agent_id=3efbe722-1039-41ec-9080-99de2b03cf35  workspace_name=test-workspace ...
   error= post xray scan:
              github.com/coder/coder-xray/reporter.(*K8sReporter).Init.func2.1
                  /home/runner/work/coder-xray/coder-xray/reporter/reporter.go:121
            - POST https://coder.example.com/api/v2/integrations/jfrog/xray-scan: unexpected status code 404: Route not found.
References - https://coder.com/docs/admin/integrations/jfrog-artifactory - https://github.com/coder/coder-xray - https://coder.com/docs/guides/xray-integration
Coder
JFrog Artifactory | Coder Docs
Integrate Coder with JFrog Artifactory
GitHub
GitHub - coder/coder-xray: JFrog XRay Integration
JFrog XRay Integration. Contribute to coder/coder-xray development by creating an account on GitHub.
7 Replies
Codercord
Codercord•2mo ago
Codercord
Codercord•2mo ago
<#1412755316030046340>
Category
Help needed
Product
Coder (v2)
Platform
Linux
Logs
Please post any relevant logs/error messages.
Ethan
Ethan•2mo ago
unfortunately the jfrog xray integration (and that API endpoint) was removed in Coder 2.22 🙁
yuji.fushiguro
yuji.fushiguroOP•2mo ago
Thank you for that. Is there another way to get xray scans at all through Coder?
matifali
matifali•5w ago
The integration we retired was adding some visual clues to the Coder workspace page. You can still create an integration manually. Here is an issue that talks about how it can be done. https://github.com/coder/registry/issues/65
GitHub
JFrog xray scanning module to list workspace image vulnerabilities ...
Extracted from coder/coder#12838, see the issue for more details. A sample output The module should add the metadata to any workspace given the image, repo name, and xray-url. module &quot;jfrog-xr...
matifali
matifali•5w ago
There is a bug where you can't link coder_metadata from isnide a module but you can drop that in the root template
matifali
matifali•5w ago
Here is another related issue. https://github.com/coder/coder/issues/12838 I think we can still have an integration guide without the native UI integration we retired.
GitHub
JFrog Xray integration · Issue #12838 · coder/coder
Context Coder recently published a guide on how to integrate with JFrog Xray to scan workspace images. That guide uses coder-xray utility which can be deployed to scan all workspaces in a given K8s...

Did you find this page helpful?