Secure Publish Artifact
A 3-step recipe with JFrog. We can help you get access.
Recipe · 3 steps
Secure Publish Artifact
with JFrog · Vulnerability Management
Deploy an artifact and scan it with Xray in one flow.
- Deploy the artifact to the target repository path.
- Trigger an Xray scan for the deployed artifact's component.
- Read the artifact summary to capture the security issues and licenses for the freshly published artifact.
What you'll need to have ready
- repoKey: The repository key to deploy into.
- itemPath: The repository path for the artifact.
- content: The raw artifact content to deploy.
- componentID: The Xray component id for the artifact (e.g. docker://image:tag).
For your developer
Arazzo workflow jfrog:secure-publish-artifact, 3 operations: $sourceDescriptions.artifactsStorageApi.deployArtifact → $sourceDescriptions.scanningApi.scanArtifact → $sourceDescriptions.summaryApi.getArtifactSummary. Specs on APIs.io.