JPMorgan Chase Secures Thousands of Daily Builds with JFrog Artifactory

JPMorgan Chase's software delivery pipeline is now more secure than ever thanks to its adoption of JFrog Artifactory. The platform has helped the bank centralize its container pipeline, support thousands of daily builds, and detect vulnerabilities before deployment.

According to Seetaram Rayarao, vice president and senior lead engineer at JPMorgan Chase, 'We run thousands of builds in a day.' The JFrog Artifactory platform has been able to scale with this volume and persist the resulting container images in its repositories. This has improved build performance by caching dependencies and container layers.

The platform also provides visibility into what goes into software development, allowing security teams to track the components behind each build. This is similar to a 'bill of materials' used in manufacturing to track physical product components. Software bills of materials provide an inventory of libraries, dependencies, and other components contained in an application.

The use of JFrog Artifactory has not only improved security but also automated the path to production. The platform incorporates dependency caching, vulnerability scanning, and policy enforcement into its delivery workflow, reducing manual work while maintaining visibility into what is deployed.