New Features

 

Private registry integrations

  1. Docs Library | Snyk
  2. Integrations
  3. Private registry integrations

Artifactory Registry Setup

Overview

You can configure two types of Artifactory Package Repository integrations:

  1. Publicly accessible instances protected by basic authentication
  2. Instances on a private network (with or without basic authentication) accessed via a broker

Brokered Artifactory is currently supported for Maven and Node.js (npm and Yarn).

Getting started

  1. Go to Settings > Integrations > Package Repositories > Artifactory
  2. You should see this screen at the beginning.
    Screenshot_2020-04-17_at_14.38.12.png

    Note

    If you do not see the “Publicly accessible” switch you do not have the necessary permissions and can only add a publicly accessible instance.
    Contact support@snyk.io if you want to add a private registry

Set up publicly accessible instances

  1. Enter URL of your Artifactory instance, this must end with “/artifactory”

  2. Enter Username

  3. Enter Password

  4. Hit Save

Set up brokered instances

  1. Toggle Artifactory (Publicly accessible) switch, you should now see a form for generating an Artifactory Broker token.

    Screenshot_2020-04-17_at_14.38.26.png

  2. Click on Generate and Save button

  3. Copy the token that was generated for you, it will be needed to set up new Broker Client

  4. Set up a new Broker Client in your prod environment:
    1. Pull Broker Artifactory image from Dockerhub:
       
      docker pull snyk/broker:artifactory
    2. Run docker image and provide environment variables
       
      docker run --restart=always \
  -p 8000:8000 \
  -e BROKER_TOKEN=secret-broker-token \
  -e ARTIFACTORY_URL=<username>:<password>@<yourdomain>.artifactory.com/artifactory \
 -e RES_BODY_URL_SUB=http://<yourdomain>.artifactory.com/artifactory
  snyk/broker:artifactory
      BROKER_TOKEN is token you just generated in Integration > Artifactory form
       ARTIFACTORY_URL is URL to your artifactory instance, including /artifactory at the end of URL. Omit <username>:<password>@ credentials if not using basic auth
      RES_BODY_URL_SUB is the URL of the artifactory without credentials, and with http protocol and is required for NPM integration
    3. Check connection status by refreshing Artifactory Integration Settings page, no connection error should be displayed