# xray

How to use JFrog Xray to scan Docker images, Maven JARs, and npm packages for CVEs and license violations — setting up security policies, watching repositories, and blocking builds with policy violations.

Integrate JFrog Xray into your artifact pipeline to detect CVEs, license violations, and block insecure images from reaching production.