Artifactory

JFrog User and Permissions

Heeler connects to JFrog Artifactory at a given domain using an account user name and password. We recommend creating a Heeler-specific account that has the minimum permissions required to harvest the necessary information for Heeler to perform its analysis.

The JFrog permission should be defined to include Read permission for Any repository. I.e.,:

The permission can be applied to the Heeler-specific account or to a group of which the Heeler-specific account is a member.

Once the account has been established and its user name and password are defined, obtain the domain of the Artifactory registry. The domain can be obtained through the JFrog URL or from an image. For example, Heeler's JFrog URL is https://heeler.jfrog.io/ui/ , so its domain is heeler.jfrog.io.

Add Artifactory to Heeler

1. In Heeler, select the Settings icon from the top navigation
2. Select Connections -> Registries then select Add Registry

1. Enter a Name for the Registry

2. Enter the Domain of the Artifactory account

3. Enter the User Name and Password for Heeler to use to access the Artifactory account

4. If the registry is public-facing, check Validate Credentials. If the registry is on-prem, leave unchecked as Heeler will not be able to connect to the registry to validate the credentials.

After clicking Add Registry, its Health property should update. If the Registry is on-prem or if it is public-facing and its credentials validated, it should update to Healthy.

If your Registry is public-facing and Healthy, the Heeler application will be able to download and analyze images.

If the Registry is on-prem, then you will need to deploy a Broker in your network in order to provide visibility. Once deployed and configured, that Broker will pull jobs from the Heeler application, perform the jobs, and report back. Then, Heeler can provide the full scope of services for your Artifactory Registry.