The Cloud Native Computing Foundation’s flagship conference gathers adopters and technologists from leading open-source and cloud-native communities together.
November 12th, 2024 - November 15th, 2024
Salt Lake City, Utah
Read More
Seamless Security with Artifactory and Coder
Ammar Bandukwala
on September 27th, 2023
Updated on October 16th, 2024
JFrog Artifactory is a tool for securing and distributing binary artifacts. It’s used by the world’s largest enterprises to vet external dependencies as they enter development environments and vet internal builds as they move from dev to staging to production.
List of repository types supported by Artifactory.
Through the expressiveness of Coder Templates, platform teams can now ensure that all development dependencies originate from Artifactory. You can find a full example template here and nitty-gritty details on how to set up the integration here.
Broadly, the integration involves setting up Artifactory repositories for each type of secured dependency:
Then, using Coder Templates with the Artifactory to automatically provision a scoped token for each workspace:
Next, configure package managers in the coder_agent ’s script:
Then, push the template up to Coder and developers have an experience whereby the workspaces they create automatically pull dependencies from Artifactory:
And done. Developers now have an environment where they can securely install dependencies using standard methods. This is a prime example of Coder’s vision of making secure development transparent and painless.
VS Code Extensions
IDE extensions are an emerging threat to development environments. There are few resources for running private extension registries due to their proprietary nature. As an aside to our development of code-server, we released code-marketplace so that teams can run internal (even air-gapped) marketplaces.
code-marketplace has first-class support for Artifactory, and we’ve seen good adoption of the tool in the enterprise.
In Closing
The integration between JFrog Artifactory and Coder represents a significant advancement in secure and efficient software development. By leveraging Artifactory's capabilities for binary artifact management along with Coder's automated workspace provisioning, development teams can establish a secure, streamlined workflow.
To learn more about our integration, check out Jfrog’s Co-founder and CTO, Yoav Landman showcasing how effortlessly Coder integrates with Jfrog in just a single click.
Subscribe to our Newsletter
Want to stay up to date on all things Coder? Subscribe to our monthly newsletter and be the first to know when we release new things!