---
title: Build JFrog configurations
slug: build-jfrog-configurations
docTags: 
createdAt: 2026-07-17T21:49:50.776Z
---

Before software package and vulnerability data from **JFrog** can be analyzed in DevOps Intelligence , you must configure JFrog as a tool for the application and onboard the associated Technical Service. This process enables DevOps Intelligence to collect software package inventory and vulnerability information from JFrog repositories and artifacts.

The setup consists of two main tasks:

1. **Configure the JFrog tool for the application** by adding a Software Package tool configuration in the Build phase.
2. **Onboard a Technical Service** associated with the application to define the JFrog repository and artifacts that DevOps Intelligence should monitor.

Once the configuration and onboarding are complete, DevOps Intelligence automatically synchronizes software package and vulnerability data from JFrog. 

# Setting up Tool application configurations from JFrog

To onboard software package data, users need to edit the tool configuration for the application and then onboard the associated Technical Service. 

Follow this path the edit the tool application configuration from Jfrog:

1. From the Kyndryl Bridge main menu :inlineImage[]{src="https://api.archbee.com/api/optimize/QU1TIK52ntw5Jsos0uOt5/NK7Yw9tQgnlqBGwu7eG4H-20260601-205917.svg" alt caption width="57" height="57"}, go to  **Services** → **Platform Services** → **Toolchain & Pipeline **→ **DevOps Intelligence **→ **Settings & Utilities **→ **Application Configurations**
2. Select the application you want to configure and expand it to display the following sections: 

- DevOps Phase 
- Tools Configured 
- Tools Having Technical Services 

3. Click the **ellipsis (...)** and select **Edit Tool Configuration**. 
4. On the Edit Configurations page, locate the **Build** phase and click **Add Tool Configuration**. 
5. On the Edit Tool Configuration page, configure the following: 

- **Build Category**: Software Package 
- **Tool Engine**: JFrog 
- Ensure that the Tool Category **Out-of-the-box** is **checked, **this because software package and vulnerability data is collected from JFrog. 

6. Review the available mappings for: 

- **Release Format** (can be modified if required). 
- **Severity**: Critical, High, Medium, and Low. 
- **Package Status**: Allowed, Denied, Need Approval, and Uncategorized. 

7. Click **Add Configuration**, then select **Next.** 
8. Click **Submit** to save the configuration. 

Once saved, the Software Package tool is added to the application and the configured tool should appear as JFrog under the application's configured tools. 

# Onboard Technical Service from JFrog

After configuring the tool applications, users need to onboard a technical service to enable DevOps Intelligence to collect software package and vulnerability data from JFrog. 

Follow these steps to onboard a Technical Service for a Software package: 

1. Identify the application, **click the ellipsis (...)**, and select **Onboard Technical Service**. 
2. On the **Onboard Technical Service** page, configure the following settings: 

- **DevOps Phase:** Build 
- **Build Category:** Software Package 
- **Tool Engine:** JFrog 
- **Connection:** Select the JFrog connection. 
- **Repository:** Select the repository containing the artifacts to be onboarded. 
- **Artifacts:** Select the artifacts for which package and vulnerability data should be collected. 

3. Click **Onboard**. 

After the onboarding request is submitted, DevOps Intelligence begins synchronizing software package data from the selected JFrog repository and artifacts. 

Once synchronization is complete, package and vulnerability information becomes available in the **Software Packages** dashboard, where users can analyze package inventory, review vulnerability details and identify the applications and technical services affected by vulnerable packages.