GITBOOK-146: Lina's Oct 20 changes

jfrog-applications/SUMMARY.md

@@ -66,6 +66,15 @@
     * [Apply Xray Policies and Watches](ide/jetbrains-ides/apply-xray-policies-and-watches.md)
     * [Android Studio Support for JCEF](ide/jetbrains-ides/android-studio-support-for-jcef.md)
     * [Troubleshooting](ide/jetbrains-ides/troubleshooting.md)
+  * [Eclipse](jfrog-applications/ide/eclipse/README.md)
+    * [Supported Technologies](jfrog-applications/ide/eclipse/supported-technologies.md)
+    * [Install and Setup of the JFrog Eclipse IDE Plugin](jfrog-applications/ide/eclipse/install-and-setup-of-the-jfrog-eclipse-ide-plugin.md)
+    * [Scan Gradle Projects with the JFrog Eclipse IDE Plugin](jfrog-applications/ide/eclipse/scan-gradle-projects-with-the-jfrog-eclipse-ide-plugin.md)
+    * [Use the JFrog Eclipse IDE Plugin](jfrog-applications/ide/eclipse/use-the-jfrog-eclipse-ide-plugin.md)
+  * [Visual Studio](jfrog-applications/ide/visual-studio/README.md)
+    * [Supported Technologies](jfrog-applications/ide/visual-studio/supported-technologies.md)
+    * [Install and Setup the JFrog Visual Studio Extension](jfrog-applications/ide/visual-studio/install-and-setup-the-jfrog-visual-studio-extension.md)
+    * [Use the JFrog Visual Studio Extension](jfrog-applications/ide/visual-studio/use-the-jfrog-visual-studio-extension.md)
 * [JFrog Frogbot](frogbot/README.md)
   * [Supported Technologies](jfrog-applications/frogbot/supported-technologies.md)
   * [Setup](frogbot/setup-frogbot.md)
@@ -110,6 +119,5 @@
 * [Infrastructure as Code (IaC)](jfrog-security-for-developers/features/infrastructure-as-code-iac.md)
 * [Secrets](jfrog-security-for-developers/features/secrets.md)
 * [SAST](jfrog-security-features/sast/README.md)
-  * [Supported Technologies](jfrog-security-features/sast/supported-technologies.md)
   * [Integrations](jfrog-security-features/sast/integrations.md)
   * [Ignore Findings](jfrog-security-features/sast/ignore-findings.md)

jfrog-applications/ide/README.md

@@ -1,2 +1,8 @@
 # IDE
 
+JFrog's IDE support significantly streamlines the development process, allowing developers to discover and remediate security issues as early as possible in the release cycle. 
+
+**Supported IDEs**
+
+<table data-view="cards"><thead><tr><th align="center"></th><th align="center"></th><th align="center"></th><th align="center"></th><th align="center"></th><th align="center"></th><th data-hidden data-card-cover data-type="files"></th></tr></thead><tbody><tr><td align="center"></td><td align="center"><img src="../.gitbook/assets/vscode.png" alt="" data-size="line"> <a href="visual-studio-code/"><strong>Visual Studio Code</strong></a></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center"></td><td></td></tr><tr><td align="center">  </td><td align="center"><img src="../.gitbook/assets/image (12).png" alt="" data-size="line"> <a href="../jfrog-applications/ide/visual-studio/"><strong>Visual Studio</strong> </a></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center"></td><td></td></tr><tr><td align="center"></td><td align="center"><img src="../.gitbook/assets/avhw2p7dx.webp" alt="" data-size="line"> <a href="../jfrog-applications/ide/eclipse/"><strong>Eclipse</strong></a></td><td align="center"></td><td align="center"></td><td align="center"></td><td align="center"></td><td></td></tr><tr><td align="center"><img src="../.gitbook/assets/images.webp" alt="" data-size="line"> <a href="jetbrains-ides/"><strong>JetBrains</strong> </a></td><td align="center">IntelliJ</td><td align="center">WebStorm</td><td align="center">PyCharm</td><td align="center">Android Studio    </td><td align="center">GoLand</td><td></td></tr></tbody></table>
+

jfrog-applications/ide/jetbrains-ides/README.md

@@ -36,7 +36,7 @@ Check out what our research team is up to and stay updated on newly discovered i
 
 **Advanced**
 
-_Requires Xray version 3.66.5 or above and Enterprise X / Enterprise+ subscription with_ [_Advanced DevSecOps_](https://jfrog.com/xray/#xray-advanced)_)._
+_Requires Xray version 3.66.5 or above and Enterprise X / Enterprise+ subscription with_ [_Advanced DevSecOps_](https://jfrog.com/xray/#xray-advanced)_._ 
 
 <details>
 

jfrog-applications/jfrog-applications/ide/eclipse/README.md

@@ -0,0 +1,17 @@
+# Eclipse
+
+The JFrog Eclipse plugin adds JFrog Xray scanning of Maven, Gradle, and npm project dependencies to your Eclipse IDE. It allows developers to view panels displaying vulnerability information about the components and their dependencies directly in their Eclipse IDE. With this information, a developer can make an informed decision on whether to use a component or not before it gets entrenched into the organization’s product.
+
+<div align="left">
+
+<figure><img src="../../../.gitbook/assets/0.jpeg" alt="" width="375"><figcaption></figcaption></figure>
+
+</div>
+
+The plugin filter allows you view the scanned results according to issues or licenses.
+
+**Source Code**: The JFrog Eclipse Plugin code is [available on Github](https://github.com/jfrog/jfrog-eclipse-plugin).
+
+### Prerequisites
+
+JFrog Xray version 1.7.2.3 and above.

jfrog-applications/jfrog-applications/ide/eclipse/install-and-setup-of-the-jfrog-eclipse-ide-plugin.md

@@ -0,0 +1,38 @@
+# Install and Setup of the JFrog Eclipse IDE Plugin
+
+To install and work with the plugin:
+
+1. Install the JFrog plugin
+2. If JFrog Xray is behind an HTTP proxy, configure the proxy settings as described [here](https://help.eclipse.org/kepler/index.jsp?topic=%2Forg.eclipse.platform.doc.user%2Freference%2Fref-net-preferences.htm). This is supported since version 1.1.0 of the JFrog Eclipse Plugin.
+3. Configure the plugin to connect to JFrog Xray
+4. Scan and view the results
+5. Filter Xray Scanned Results
+
+### Download the JFrog Eclipse IDE Plugin
+
+| **Version** | **Download link**                                                                                                              | **Compatibility**   |
+| ----------- | ------------------------------------------------------------------------------------------------------------------------------ | ------------------- |
+| 1.1.2       | [Download](https://github.com/jfrog/jfrog-eclipse-plugin/releases/download/1.1.2/com.jfrog.ide.eclipse.releng.update-site.zip) | Eclipse 4.13 - 4.20 |
+| 1.1.1       | [Download](https://github.com/jfrog/jfrog-eclipse-plugin/releases/download/1.1.1/com.jfrog.ide.eclipse.releng.update-site.zip) | Eclipse 4.10 - 4.19 |
+
+**Install the JFrog Eclipse IDE Plugin**
+
+1. Download the plugin zip.
+2. Go to **Help | Install New Software**,click **Add** and then click **Archive**.
+3. Choose the plugin zip file you downloaded and click **Add**.
+4. Click **Next**.
+
+### Configure the JFrog Eclipse IDE Plugin
+
+This section describes how to configure the JFrog Eclipse IDE Plugin and reviews connecting to JFrog Xray and Scanning Gradel projects with the Plugin. It reviews the following:
+
+* Connect to JFrog Xray \[315]
+* Scan Gradle Projects with the JFrog Eclipse IDE Plugin \[316]
+
+**Connect to JFrog Xray**
+
+Once the plugin is successfully installed, connect the plugin to your instance of JFrog Xray.
+
+1. Go to **Eclipse (Preferences)**, click **JFrog Xray**.
+2. Set your JFrog Xray URL and login credentials.
+3. Test your connection to Xray using the **Test Connection** button.

jfrog-applications/jfrog-applications/ide/eclipse/scan-gradle-projects-with-the-jfrog-eclipse-ide-plugin.md

@@ -0,0 +1,15 @@
+# Scan Gradle Projects with the JFrog Eclipse IDE Plugin
+
+Behind the scenes, the JFrog plugin executes a Gradle script, which creates the dependencies tree of the project. The plugin reads the Gradle configuration defined in Eclipse. This configuration is added to Eclipse by the [Buildship](https://marketplace.eclipse.org/content/buildship-gradle-integration) plugin You can access this configuration by going in **Preferences** | **Gradle** | **Gradle distribution**
+
+{% hint style="info" %}
+
+
+If the Gradle configuration is not set, then Gradle Wrapper will be used. If the project does not include the Gradle Wrapper configuration, Gradle will be automatically downloaded.
+{% endhint %}
+
+<div align="left">
+
+<figure><img src="../../../.gitbook/assets/0 (1).jpeg" alt="" width="375"><figcaption></figcaption></figure>
+
+</div>

jfrog-applications/jfrog-applications/ide/eclipse/supported-technologies.md

@@ -0,0 +1,5 @@
+# Supported Technologies
+
+### Software Composition Analysis (SCA)
+
+JFrog supports **NuGet** Package Manager for Eclipse

jfrog-applications/jfrog-applications/ide/eclipse/use-the-jfrog-eclipse-ide-plugin.md

@@ -0,0 +1,50 @@
+# Use the JFrog Eclipse IDE Plugin
+
+<div align="left">
+
+<img src="../../../.gitbook/assets/0 (2).jpeg" alt="" width="375">
+
+</div>
+
+This section describes how to use the JFrog Eclipse IDE Plugin, it reviews the following:
+
+* Open JFrog tab
+* Scan and View Results using the JFrog Eclipse IDE Plugin&#x20;
+* Filtering Xray Scanned Results using the JFrog Eclipse IDE Plugin
+
+### Open JFrog tab
+
+To open the plugin tab, click **Window | Show View | Other | Security | JFrog**.
+
+<div align="left">
+
+<img src="../../../.gitbook/assets/1 (1).png" alt="" width="326">
+
+</div>
+
+### Scan and View Results using the JFrog Eclipse IDE Plugin
+
+JFrog Xray automatically performs a scan when the plugin first loaded on startup. To manually invoke a scan:
+
+1. Click Refresh in the JFrog plugin.
+2. View the scanned results in the plugin.
+
+### Filtering Xray Scanned Results using the JFrog Eclipse IDE Plugin
+
+The JFrog plugin provides the following filter to narrow down the scanned results to view exactly what you need:
+
+* **Severity**: Displays issues according to specific severity.
+
+<div align="left">
+
+<img src="../../../.gitbook/assets/1 (1).jpeg" alt="" width="375">
+
+</div>
+
+* **License**: Displays components according to specific licenses.
+
+<div align="left">
+
+<figure><img src="../../../.gitbook/assets/0 (5).jpeg" alt="" width="375"><figcaption></figcaption></figure>
+
+</div>

jfrog-applications/jfrog-applications/ide/jetbrains-ides/supported-technologies.md

@@ -14,4 +14,17 @@ layout:
 
 # Supported Technologies
 
-<table><thead><tr><th width="257">Feature</th><th>Go</th><th width="100">Maven</th><th>Gradle</th><th>npm</th><th>Yarn v1</th><th>Yarn v2</th><th>Pip</th><th>Pipenv</th><th>Poetry</th><th>Terraform</th></tr></thead><tbody><tr><td>SCA</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Contextual Analysis</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Secrets Detection</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td>SAST</td><td>❌</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Infrastructure as Code (IaC)</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>✅</td></tr><tr><td>Autofix for direct dep.</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>License Violations</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td></tr></tbody></table>
+### Software Composition Analysis (SCA)
+
+JFrog supports the following Package Managers for JetBrains IDEs:
+
+**Go** | **Maven** | **Gradle** | **npm**  | **Yarn v1** |  **Yarn v2** | **Pip** | **Pipenv** | **Poetry** |
+
+Additional SCA capabilities supported:&#x20;
+
+* License Violations
+* Autofix for direct dep
+
+### JFrog Advanced Security
+
+JFrog supports [Contextual Analysis](../../../jfrog-security-for-developers/features/contextual-analysis.md), [Secrets](../../../jfrog-security-for-developers/features/secrets.md), [Infrastructure as Code (IaC)](../../../jfrog-security-for-developers/features/infrastructure-as-code-iac.md), and [SAST ](../../../jfrog-security-features/sast/)for JetBrains IDEs. Follow the links to learn more about each feature and its supported technologies and languages.&#x20;

jfrog-applications/jfrog-applications/ide/visual-studio-code/supported-technologies.md

@@ -14,4 +14,22 @@ layout:
 
 # Supported Technologies
 
-<table><thead><tr><th width="257">Feature</th><th>Go</th><th width="100">Maven</th><th>npm</th><th>pnpm</th><th>Yarn</th><th>Pip</th><th>Pipenv</th><th>Poetry</th><th>.NET CLI</th><th>NuGet</th><th>Terraform</th></tr></thead><tbody><tr><td>SCA</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Contextual Analysis</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Secrets Detection</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td>SAST</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Exclude dev dependencies</td><td>❌</td><td>❌</td><td>✅</td><td>✅</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td></tr><tr><td>Infrastructure as Code (IaC)</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>❌</td><td>✅</td></tr><tr><td>Autofix for direct dep.</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>License Violations</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td><td>✅</td></tr></tbody></table>
+### Software Composition Analysis (SCA)
+
+JFrog supports the following Package Managers for Visual Studio Code:
+
+**Go** | **Maven** | **npm** | **pnpm** | **Yarn** | **Pip** | **Pipenv** | **Poetry** | **.Net CLI** | **NuGet**&#x20;
+
+Additional SCA capabilities supported:&#x20;
+
+* License Violations
+* Autofix for direct dep
+
+**Note**: Exclude dev dependencies is supported for npm and pnpm only.&#x20;
+
+### JFrog Advanced Security
+
+JFrog supports [Contextual Analysis](../../../jfrog-security-for-developers/features/contextual-analysis.md), [Secrets](../../../jfrog-security-for-developers/features/secrets.md), [Infrastructure as Code (IaC)](../../../jfrog-security-for-developers/features/infrastructure-as-code-iac.md), and [SAST ](../../../jfrog-security-features/sast/)for Visual Studio Code. Follow the links to learn more about each feature and its supported technologies and languages.&#x20;
+
+
+

jfrog-applications/jfrog-applications/ide/visual-studio/README.md

@@ -0,0 +1,19 @@
+# Visual Studio
+
+The JFrog Visual Studio Extension adds JFrog Xray scanning of NuGet project dependencies to your Visual Studio IDE. It allows developers to view panels displaying vulnerability information about the components and their dependencies directly in Visual Studio. With this information, a developer can make an informed decision on whether to use a component or not before it gets entrenched into the organization’s product.
+
+<div align="left">
+
+<figure><img src="../../../.gitbook/assets/0 (4).jpeg" alt="" width="375"><figcaption></figcaption></figure>
+
+</div>
+
+The extension filter allows you view the scanned results according to issues severity.
+
+**Working In Visual Studio Code?**
+
+Take a look at the user documentation for the [JFrog Visual Studio Code](../../../ide/visual-studio-code/) Extension.&#x20;
+
+Source Code:
+
+The JFrog Visual Studio Extension code is [available on Github](https://github.com/jfrog/jfrog-visual-studio-extension).

jfrog-applications/jfrog-applications/ide/visual-studio/install-and-setup-the-jfrog-visual-studio-extension.md

@@ -0,0 +1,48 @@
+# Install and Setup the JFrog Visual Studio Extension
+
+This section reviews how to setup and install the JFrog Visual Studio Extension. It lists the supported visual studio versions, and instructions on installing and configuring the extension. It reviews the following:
+
+* Supported Visual Studio Versions
+* Install the JFrog Visual Studio Extension
+* Configure the JFrog Visual Studio Extension to Connect to JFrog Xray
+* Use the JFrog Visual Studio Extension
+
+### Supported Visual Studio Versions
+
+Two extensions are shared to the marketplace - each of them supports a different Visual Studio version:
+
+* Visual Studio 2022 - [JFrogV2](https://marketplace.visualstudio.com/items?itemName=JFrog.JFrogV2)
+* Visual Studio 2017 and 2019 - [JFrog](https://marketplace.visualstudio.com/items?itemName=JFrog.JFrog)
+
+Prerequisites
+
+Frog Xray version 2.5.0 and above.
+
+### Install the JFrog Visual Studio Extension
+
+To install and work with the extension:
+
+1. Open the terminal window.
+2. Run the **nuget** command. If it is not recognized as a command, please add **nuget.exe** to the **PATH** environment variable.
+3. If your projects use **NPM**, Run the **npm** command. If it is not recognized as a command, please add **npm.exe** to the **PATH**environment variable.
+4. Open Visual Studio
+5. Go to Tools | Extensions and Updates
+6. Search for **JFrog**.
+7. Click on Download
+8. Once the installation is completed, re-open Visual Studio.
+
+### Configure the JFrog Visual Studio Extension to Connect to JFrog Xray
+
+Once the extension is successfully installed, connect Visual Studio to your instance of JFrog Xray.
+
+### Go to Tools | Options | JFrog | JFrog Xray
+
+1. Set your JFrog Platform URL and login credentials.
+2.  Test your connection to Xray using the **Test connection** button.\
+
+
+    <div align="left">
+
+    <figure><img src="../../../.gitbook/assets/spaces_HtpcI8sApaH537Ph5QxY_uploads_9WPR1FlGfqJNZbX6jYoR_0.png" alt="" width="375"><figcaption></figcaption></figure>
+
+    </div>

jfrog-applications/jfrog-applications/ide/visual-studio/supported-technologies.md

@@ -0,0 +1,7 @@
+# Supported Technologies
+
+### Software Composition Analysis (SCA)
+
+JFrog supports the following Package Managers for Visual Studio: 
+
+**Maven** | **Gradle** | **npm**

jfrog-applications/jfrog-applications/ide/visual-studio/use-the-jfrog-visual-studio-extension.md

@@ -0,0 +1,43 @@
+# Use the JFrog Visual Studio Extension
+
+This section reviews how to use the JFrog Visual Studio extension including Scan and View results, Filter Scanned Results, Troubleshooting and Reporting issues.
+
+### Scan and View Results
+
+To scan and view the project dependencies, open **View | Other Windows | JFrog**
+
+<div align="left">
+
+<img src="../../../.gitbook/assets/1.jpeg" alt="" width="375">
+
+</div>
+
+JFrog Xray automatically performs a scan when the project is opened or when clicking on the **Refresh** button in the JFrog window.
+
+### Filter the Scanned Results
+
+The JFrog Extension provides a filter to narrow down the scanned results to view exactly what you need.
+
+<div align="left">
+
+<img src="../../../.gitbook/assets/0 (6).jpeg" alt="">
+
+</div>
+
+### Troubleshooting
+
+When troubleshooting issues, it os recommended to look at the log messages in the **Output** console, located at the bottom of the screen.
+
+<div align="left">
+
+<figure><img src="../../../.gitbook/assets/1 (2).jpeg" alt="" width="527"><figcaption></figcaption></figure>
+
+</div>
+
+### Reporting Issues
+
+Please report issues by opening an issue on [Github](https://github.com/jfrog/jfrog-visual-studio-extension/issues).
+
+### Watch the Screencast
+
+[https://www.youtube.com/embed/bOgu8P7HOsU](https://www.youtube.com/embed/bOgu8P7HOsU)