GitHub and JFrog announced a partnership on Wednesday that will see a deeper integration between the two companies\u2019 platforms, giving developers and their support teams an easier way to manage both their source code and the resulting binaries across both services.<\/p>\n
Among other things, this includes the ability to trace code from source to binary packages across both platforms, single sign-on support and unified project structures, including role mapping. Later, there will also be a unified dashboard that will provide a single pane of glass for seeing the results of source- and binary-focused security scans from GitHub\u2019s and JFrog\u2019s respective security tools.<\/p>\n At first, this may seem like an odd match, since both companies play in the DevOps space. But since GitHub focuses on source code and JFrog on binaries, the overlap between them is actually relatively small. As it turns out, about half of JFrog\u2019s customers are also GitHub users; as JFrog CEO and co-founder Shlomi Ben Haim and GitHub CEO Thomas Dohmke both told me, the main mission here is to make their lives easier.<\/p>\n \u201cWe are using Artifactory ourselves within GitHub,\u201d Dohmke told me (just as JFrog uses GitHub for managing its source code). \u201cAnd so it felt natural for us to do more together as we\u2019re thinking about how we can secure the software ecosystem, how we can help our enterprise customers like AT&T and Fidelity or Vimeo? How can we help them to have an end-to end lifecycle. And if you remember our very first conversation<\/a>, before I became the CEO, our vision for GitHub is that we are part of a large ecosystem. Copilot Extensions<\/a> is all along those same lines: that we have to partner with other companies in our ecosystem to provide our customers \u2014 our developers \u2014 the best experience.\u201d<\/p>\n Similarly, Jfrog\u2019s Ben Haim stressed that his company is all about binaries \u2014 and creating security products<\/a> around that. \u201cJFrog is the only comprehensive software supply chain platform in the world,\u201d he said. \u201cGitLab is a source-code platform, GitHub is a source-code platform. Atlassian with BitBucket \u2014 same thing. [\u2026] Artifactory is your binary repository and serves the organization as the single source of record.\u201d<\/p>\n GitLab may argue with that description, though, given that the company offers a rather comprehensive DevSecOps platform. But where there is no argument is that enterprises today are looking to consolidate their spending around best-of-breed solutions. Today\u2019s enterprises, Ben Haim said, need to be able to scale, but in a secure way, all while moving increasingly faster and picking the best services in the market.<\/p>\n \u201cWhen you think about where developers live, they live on GitHub and they live on JFrog. [\u2026] Basically, this collaboration, this marriage, doesn\u2019t have to be explained to our customers because this is where they are: they are either here for the source code, or here for the binaries \u2014 and this together story makes their lives easier,\u201d he said.<\/p>\n You can\u2019t say \u201cGitHub\u201d in 2024 and not talk about Copilot, the company\u2019s AI tool. Wednesday\u2019s announcement is no exception, with a deep JFrog\/Copilot integration that now extends Copilot Chat to let developers ask questions about which software packages (or which version of those packages) to use, how to best secure them, and how to set up JFrog projects, for example.<\/p>\n \u201cChatting with GitHub\u2019s Copilot to select the right and secure software package based on the extensive metadata stored in JFrog Catalog can be a game-changer,\u201d explained John Nuttall, Director of Technology at AT&T, one of JFrog\u2019s and GitHub\u2019s joint customers. \u201cThis integration will significantly enhance the efficiency of Copilot users across the software supply chain: binary-focused and code environments. This partnership offers the best of both worlds.\u201d<\/p>\n![\"\"](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/05\/GitHub-Invertocat-Logo-1.png?w=240\"){kind=logo}
![\"\"](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/05\/JFrog-Logo.png?w=201\"){kind=logo}