skills.rest
jfrog
jfrogOFFICIAL
Explore all skills by this author →
WebsiteGitHub

JFrog Curation

Automate package-curation policy definition, enforcement, and auditing via REST and CLI.

5|1|Updated Mar 2, 2026
Search Tags:#curation#security#audit#policies#waivers#artifactory
One-click install
npx skills add https://github.com/jfrog/ai-agent-examples --skill jfrog-curation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: JFrog Curation
Source: https://github.com/jfrog/ai-agent-examples/tree/main/platform-features/skills/jfrog-curation
Command: npx skills add https://github.com/jfrog/ai-agent-examples --skill jfrog-curation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Curation enforces policy-based checks to prevent non-compliant packages from entering your Artifactory instance, reducing risk in software supply chains.

Core Features & Use Cases

  • Policy lifecycle: create, update, list, and delete curated policies across repositories.
  • Audit and waivers: view audit events and manage scope-based waivers for exceptions.
  • CLI/API integration: manage policies via REST endpoints and jfrog-cli commands for automated workflows.

Quick Start

Enable a basic curation policy across repositories to block non-compliant packages.

Frequently Asked Questions about JFrog Curation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce secure package policies across Artifactory repositories?▼

You can enforce secure package policies by applying curation across multiple Artifactory repositories. It automates policy creation, enforcement, and auditing to block non-compliant artifacts and reduce software supply chain risk.

What is package curation in software supply chain security?▼

Package curation is a mechanism that automates policy-based checks to prevent non-compliant packages from entering your repositories. It manages the full policy lifecycle including creation, audits, and waivers for real-world supply chain scenarios.

Can I manage curation policies using the JFrog CLI and REST API?▼

Yes, you can manage curation policies via REST endpoints and jfrog-cli commands. This CLI/API integration supports automated workflows for policy creation, updates, auditing, and applying scope-based waivers.

How do I apply a waiver for a blocked package in an audit?▼

You can apply scope-based waivers to manage exceptions for blocked packages. The curation system logs audit events, allowing you to view violations and grant specific waivers for non-compliant artifacts.

Does Artifactory curation support token-based authentication for automated workflows?▼

Yes, Artifactory curation supports token-based authentication. This secures your CLI and REST API interactions when managing policies, performing health checks, and executing audits across curated repositories.

Related Skills

Explore More Legal & Compliance Skills→
jleechanorgjleechanorg

github-auth

Configure GitHub authentication for Git and gh CLI via HTTPS tokens or SSH keys.

Official
Intermediate
riparinoriparino
1

defensive-mitigations

Audits Windows security mitigations and monitors registry tamper events for SOC workflows.

Community
Advanced
jfrogjfrog
5

github-configure-ci-workflows

Automate GitHub workflow modernization to integrate JFrog Artifactory across repositories.

Official
Intermediate
stephanjstephanj
9

dependency-updater

Automate dependency updates and security audits across multiple programming languages.

Community
Advanced