Buyela Ezindabeni
UkuphephaAI Understanding ukwaziswa

I-SecurityBrief ibika ukuthi i-JFrog yethula amathuluzi okuphepha agxile ku-AI

I-SecurityBrief ibika ukuthi i-JFrog yethule ukubusa, ukuphepha kwe-ejenti, ukulungisa okuzenzakalelayo kanye namathuluzi okuhlanganiswa kwe-cloud-runtime kumaketanga okuphakelwa kwesofthiwe alawulwa ngokwandayo ama-ejenti wokubhala amakhodi we-AI.

4 min readRead the linked source
Source-provided image accompanying SecurityBrief reports JFrog launches AI-focused supply-chain security tools
Inkomba yomthomboUmthombo urekhodiwe
Umshicileli
securitybrief.co.nz
Isixhumanisi somthombo
securitybrief.co.nzhttps://securitybrief.co.nz/story/jfrog-launches-ai-era-security-tools-for-software-supply
Uhlobo lomthombo
Umthombo oxhunyiwe — isimo somthombo oyinhloko asikasungulwa.
Kuphinde kucashunwe

Indaba igcine ukubuyekezwa

UmongoQonda lokhu ngemizuzwana engama-60

Qala lapha

Imigomo ebalulekile

I-API (I-Application Programming Interface)
Indlela ehlelekile yesistimu yesofthiwe eyodwa ukuthumela izicelo futhi yamukele izimpendulo ezivela kwenye isistimu.
Ipayipi
Ukugeleza komsebenzi oku-oda kokucutshungulwa kwangaphambili, izinyathelo zemodeli, nezigaba zokucubungula ngemuva.
ZihloleImibuzo ye-AI Agents

Yini eshintshile kusukela ekushicilelweni

  1. Ishicilelwe okokuqala
  2. I-SecurityBrief ibika ukuthi i-JFrog yethule ukubusa, ukuphepha kwe-ejenti, ukulungisa okuzenzakalelayo kanye namathuluzi okuhlanganiswa kwe-cloud-runtime kumaketanga okuphakelwa kwesofthiwe alawulwa ngokwandayo ama-ejenti wokubhala amakhodi we-AI.

Kwenzekeni

I-SecurityBrief ibika ukuthi i-JFrog yethule imikhiqizo embalwa yezokuphepha kanye nemikhiqizo yokuphatha eqondiswe ezinhlanganweni ezisebenzisa ama-ejenti wokufaka amakhodi we-AI. Ukukhishwa kufaka phakathi izici ze-DevGovOps ku-AppTrust, izilawuli ze-AgentSecOps ze-AI ethembekile nokuncika kwesofthiwe, i-Zero-Touch Remediation, kanye nokuhlanganiswa okusekelwe ku-API ne-Wiz, okuyingxenye ye-Google Cloud.

I-SecurityBrief ibika ukuthi imisebenzi emisha ye-AppTrust DevGovOps ye-JFrog ihloselwe ukuhlanganisa imithetho yenqubomgomo, ukuthwebula ngokuzenzakalelayo ubufakazi bokucwaninga, ukusebenzisa izifanekiso zokuthobela imithetho nokuqapha izinguqulo zokukhiqiza ezisekelwayo ngemva kokukhishwa. Umbiko uthi i-JFrog ixhumanise ukwethulwa nezidingo nezinhlaka ezihlanganisa i-EU Cyber ​​Resilience Act, NIST SSDF kanye ne-FedRAMP, futhi yacaphuna inhlawulo ephezulu ye-CRA yama-€15 wezigidi noma u-2.5% wenzuzo yonyaka emhlabeni wonke.

Umbiko uthi imisebenzi ye-JFrog's AgentSecOps yakhelwe ukuskena futhi ilawule amaphakheji esoftware, amamodeli, ama-plugin, okwaziswayo kanye nezinye izimpahla ezihlobene ne-AI. Kubikwa ukuthi zifaka indawo yokubhalisa yama-ejenti ama-plugin, usekelo lwezinga lomphathi wephakheji yomenzeli ngaphakathi kwe-Artifactory, kanye nezilawuli ezikhawulela amathuluzi nama-ejenti ancike angawasebenzisa ezindaweni zonjiniyela.

I-SecurityBrief ibika ukuthi i-Zero-Touch Remediation ingakwazi ukuhlonza ukulungiswa kokuba sengozini okuvela kozakwethu abahlanganisa i-Broadcom, i-Chainguard, i-Echo, i-IBM/I-Red Hat, i-Moderne, i-TuxCare ne-Seal Security, bese ikusebenzisa ngepayipi lekhasimende ngaphandle kokuphoqelela isibuyekezo senguqulo. Umbiko awuqinisekisi ukuthi isistimu iqinisekisa kanjani konke ukulungisa noma ukuthi umkhiqizo uyatholakala kuwo wonke amakhasimende e-JFrog.

Ukuhlanganiswa kwe-Wiz okubikiwe kusebenzisa ukugeleza komsebenzi kwe-API ukuxhuma imisebenzi yamafu edaluliwe nezinto zobuciko ze-Artifactory ezihambisanayo, idatha yokuba sengcupheni, ukuvela kanye nolwazi lobunikazi. I-SecurityBrief ithi ayidingi ama-ejenti amasha noma izinsimbi zeqoqo. U-JFrog, Wiz kanye nabaphathi ababambisene nabo banikeze izitatimende ezicashunwe embikweni; lezo zimangalo azizange ziqinisekiswe ngokuzimela ezintweni ezinikeziwe.

Imininingwane yomthombo: securitybrief.co.nz ↗

Kungani kubalulekile

Ama-ejenti okufaka amakhodi we-AI angakwazi ukukhetha ngokuzimela futhi afake amaphakheji, ama-plugin, ukwaziswa nezinye izakhi, adale ubungozi bochungechunge lokuhlinzeka lezo izilawuli zendabuko ezigxile kumuntu ezingeke zibhekane nazo. Indlela ebikiwe ka-JFrog ihlanganisa ukusetshenziswa kwenqubomgomo, ukuvela, ukuskena kokuba sengozini nokulungiswa okuzenzakalelayo ekuhambeni komsebenzi okufanayo. Uma imikhiqizo isebenza njengoba kuchaziwe, izinhlangano zinganciphisa ukuhlobana okwenziwa ngesandla kanye nomsebenzi wokuchibiyela kuyilapho zikhiqiza ubufakazi bokuthobelana. Umbiko onikeziwe awuqinisekisi ngokuzimela ukusebenza komkhiqizo, ukutholwa kwekhasimende, ukutholakala okuvamile noma amanani entengo.

Inkinga eyinhloko isivinini sokusebenza. I-SecurityBrief ichaza abenzeli be-AI abangabhala ikhodi futhi bathole ukuncika ngesivinini somshini, kuyilapho ukubusa, ukubuyekezwa kokuthobela kanye nokuchibiyela kusengancika ezinqubweni ezithatha kancane ezenziwa mathupha. Ukuletha inqubomgomo, ubufakazi kanye nokuvela kwe-artifact ekuhambeni komsebenzi okukhishwayo kungenza ukuhlola kokuphepha kuqhubeke futhi kuhloleke.

Izilawuli eziqondene nomenzeli zibhekana nokuchayeka okuhlukile kokuvikeleka kohlelo lokusebenza okuvamile: umenzeli angase akhethe ukuthi yini azoyilanda noma ayifake ngaphandle kokuthi umuntu abuyekeze isinqumo ngasinye. Ukubhaliswa nokulawulwa kwenqubomgomo yesitayela sokuvumela kungasiza izinhlangano ukuthi zibambe lokho kuziphatha, kodwa umbiko awuhlinzeki ngokuhlolwa okuzimele kokunemba kokutholwa, ukumelana nokudlula noma ukufakwa kuyo yonke imithombo yomphakathi neyimfihlo.

Ukulungisa okuzenzakalelayo kunganciphisa isikhathi phakathi kokutholwa kokuba sengozini nokulungiswa okusebenzisekayo, ikakhulukazi ezingxenyeni zomthombo ovulekile. Kodwa-ke, ukusebenzisa izinguquko ngaphandle kwesibuyekezo senguqulo kuphakamisa imibuzo ebalulekile yokusetshenziswa mayelana nokuhambisana, ukuhlolwa kokuhlehla, ukubuyisela emuva kanye nokuziphendulela. Awukho kuleyo miphumela oboniswa umbiko onikeziwe.

Interactive Mechanism

I-Interactive Mechanism: Indlela Esebenza Ngayo Ngempela

Hlola ubuchwepheshe obuyisisekelo ngemuva kwalokhu kuthuthukiswa ngokuhlanganyela.

Agent Lifecycle Stage:
1
User Intent & Planning: "Audit customer refund request #4092 and settle payment."
2
Tool Calling: Emits structured JSON call crm_get_transaction(id='4092').
3
Guardrail & Verification:🛡️ Paused: High-value action requires human operator sign-off.
4
Final Settlement: Refund recorded, email receipt dispatched, and audit log stored.
Core takeaway: An AI agent is not just a language model—it is a closed loop of planning, tool invocation, and environment feedback. Production systems require self-healing retries and strict human approval guardrails.
I-Interactive Concept Check+10 Points
AI Agents Quiz

An agent must create a draft calendar event for Tuesday at 2 p.m. Which evidence would establish the requested result?

Ongakubuka ngokulandelayo

Buka amadokhumenti aqinisekisa isimo sokukhishwa, izindawo ezisekelwayo, ukufaneleka kwamakhasimende kanye namanani entengo. Amathimba okuvikela kufanele futhi ahlole ukuthi ukulungisa okuzenzakalelayo kuqinisekiswa kanjani, kuhlehliselwa emuva futhi kubuswe ngaphambi kokuthunyelwa, ikakhulukazi uma ukulungiswa kushintsha ukuncika ngaphandle kokudinga isibuyekezo senguqulo. Ukusebenza kokuhlanganiswa kwe-Wiz kanye nokuvikeleka kwama-plugin e-ejenti, amamodeli, ukwaziswa nama-MCP kuhlala kungaziwa.

Okungaziwa ngokushesha ukutholakala, izidingo zekhasimende, ububanzi besifunda, izinguqulo ezisekelwe, ukulayisensa kanye nentengo. I-SecurityBrief ibika ukwethulwa kodwa ayisho ukuthi ikhono ngalinye livame ukutholakala yini, uma lihlolwa kuqala, noma likhawulelwe kumakhasimende akhethiwe.

Ukuhlola okuzayo kufanele kugxile ebufakazini bokuthi ukulungisa okuzenzakalelayo kuyahlolwa ngaphambi kokukhishwa nokuthi amakhasimende angakwazi ukukubuyekeza, ukugunyaza, ukuhlola noma ukukuhlehlisa. Izinhlangano futhi zizodinga ukwazi ukuthi isistimu ingakwazi yini ukuhlukanisa izimpahla zomenzeli othembekile kwezinonya noma ezisengozini.

Ukuhlanganiswa kwe-Wiz kungase kube usizo uma kumepha ngokuthembekile umthwalo wesikhathi sokusebenza ukuze kwakhiwe izinto zobuciko kanye nabanikazi abanomthwalo wemfanelo. Umthombo onikeziwe awunikezi izilinganiso ezizimele zokunemba kokuhlobanisa, isivinini sokulungisa noma ukuncishiswa kwesikhathi sokuphendula kwesigameko.

Imihlahlandlela ehlobene nemibuzo

Ama-AI AgentsUkuziphatha kwe-AIAmamodeli e-AI AchaziweHlola okwaziyo — zama imibuzo ye-AI yamahhalaBheka igama le-AI kuhlu lwethu lwamagamaLandela isilandeleli sokulawula i-AI

Izibuyekezo nezilungiso

Le ndaba ye-canonical ibuyekezwa endaweni lapho umcimbi okhulayo ushintsha ngokubonakalayo. I-URL yayo kanye nedethi yokuqala yokushicilela akushintshi.

  • I-SecurityBrief ibika ukuthi i-JFrog yethule ukubusa, ukuphepha kwe-ejenti, ukulungisa okuzenzakalelayo kanye namathuluzi okuhlanganiswa kwe-cloud-runtime kumaketanga okuphakelwa kwesofthiwe alawulwa ngokwandayo ama-ejenti wokubhala amakhodi we-AI.
Bona ilogu yezilungiso ezisesidlangalaleni
Uthole lokhu kuwusizo?