JFrog Artifactory

On an account with admin permissions, ensure you have "All Projects" selected, then go to Administration

Go to User Management > Users

Click + New User

Create a user with Read Only permissions (if needed create a group with Read Only permissions, e.g. readers). For email use an email alias that is not tied to a specific user for business continuity purposes.

Go to User Management > Access Tokens

Click Generate Token

Create a Token

1. Description: eg. "Arnica access token for container scanning"

2. Token Scope: User.

3. User name: The user created in the previous step

4. Service: Artifactory or All

5. Create Reference Token: checked (not mandatory, but recommended, see JFrog's documentation for details)

Record token details

In Arnica, next to JFrog Artifactory, click Connect

Enter the details you recorded previously

1. Alias: If you want, you can set a name for this integration.

2. Base Url: The URL used to access your JFrog Container Registry instance, eg. jfrog.example.com or for JFrog cloud, yoursubdomain.jfrog.io (you can enter it with or without the protocol, e.g. https://, and with or without a trailing / we'll normalize it for you)

3. Username: Optional. The system will attempt to retrieve it automatically from the JFrog API using the provided access token. If you get an error, use the username you used during token creation eg. arnica-service-account

4. Access Token: The token you created. (If you created a token of type "Reference", use that one).

Click Validate to confirm your credentials.

If it turns green, you are good to go, and click OK to add the integration.