Artifactory Registry Setup

Overview

You can configure two types of Artifactory Package Repository integrations:

Publicly accessible instances protected by basic authentication
Instances on a private network (with or without basic authentication) accessed via a broker

Brokered Artifactory is currently supported for Maven and Node.js (npm and Yarn).

Getting started

Go to settings > > Integrations > Package Repositories > Artifactory
You should see this screen at the beginning.

Note

If you do not see the “Publicly accessible” switch you do not have the necessary permissions and can only add a publicly accessible instance.
Contact support@snyk.io if you want to add a private registry

Set up publicly accessible instances

Enter URL of your Artifactory instance, this must end with /artifactory
Enter Username
Enter Password
Hit Save

Set up brokered instances

Toggle Artifactory (publicly accessible) switch, you should now see a form for generating an Artifactory Broker token.
Click on Generate and Save button
Copy the token that was generated for you, it will be needed to set up a new Broker Client
Set up a new Broker Client in your prod environment:

1. Pull Broker Artifactory image from Dockerhub:
```
docker pull snyk/broker:artifactory
```
2. Run docker image and provide environment variables
```
docker run --restart=always \
  -p 8000:8000 \
  -e BROKER_TOKEN=secret-broker-token \
  -e ARTIFACTORY_URL=<username>:<password>@<yourdomain>.artifactory.com/artifactory \
 -e RES_BODY_URL_SUB=http://<yourdomain>.artifactory.com/artifactory
  snyk/broker:artifactory
```
  1. BROKER_TOKEN is the token generated in Integration > Artifactory form
  2. ARTIFACTORY_URL is URL to your Artifactory instance, including /artifactory at the end of URL.
    1. Minimum required data: ARTIFACTORY_URL=my.artifactory/artifactory
    2. Parameter mapping: Parameters in brackets are optional
```
ARTIFACTORY_URL=[http://][<username>:<password>@]hostname[:port]/artifactory
```
    3. Protocol: If left empty, protocol will default to [https://]--this should only be specified when no certificate is present and http is required instead for your instance
    4. Basic auth: URL encode both <username> and <password> user info to avoid errors that will prevent authentication
    5. No basic auth: Omit <username>:<password>@ credentials
  3. RES_BODY_URL_SUB is the URL of the Artifactory without credentials, and with http protocol and is required for NPM integration
3. Check connection status by refreshing Artifactory Integration Settings page, no connection error should be displayed