jfrog-devops

Manage JFrog Artifactory repositories, artifacts, Docker registry, and Xray security scanning.

9|9|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/skills-il/developer-tools --skill jfrog-devops
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: jfrog-devops
Source: https://github.com/skills-il/developer-tools/tree/main/jfrog-devops
Command: npx skills add https://github.com/skills-il/developer-tools --skill jfrog-devops

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines DevOps workflows by managing artifacts in JFrog Artifactory and ensuring code security through JFrog Xray, reducing manual configuration and security risks.

Core Features & Use Cases

  • Artifact Management: Upload, download, and search for artifacts in Artifactory.
  • Docker Registry: Push and pull Docker images using Artifactory as the registry.
  • Security Scanning: Scan artifacts and Docker images for vulnerabilities using Xray.
  • Build Promotion: Publish build information and promote builds through different stages.
  • Use Case: Automatically upload build artifacts to Artifactory, scan them for critical vulnerabilities with Xray, and promote them to the release repository only if they pass security checks.

Quick Start

Use the jfrog-devops skill to upload the file 'my-app.jar' to the 'libs-release-local' repository.

Frequently Asked Questions about jfrog-devops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I upload and manage artifacts in JFrog Artifactory?

You can manage artifacts in JFrog Artifactory using REST API operations or JFrog CLI to upload, download, and search for files within repositories. This automates artifact storage and retrieval for DevOps workflows.

Can I use JFrog Artifactory as a Docker registry to push and pull images?

Yes, JFrog Artifactory functions as a Docker registry to push and pull Docker images. The skill provides Docker registry configuration patterns to integrate container image management into DevOps pipelines.

How do I scan Docker images and artifacts for vulnerabilities using JFrog Xray?

You scan Docker images and artifacts for vulnerabilities using JFrog Xray by applying security scanning patterns to assess builds. This ensures code security by identifying critical vulnerabilities before promoting artifacts to release repositories.

What is the best way to promote builds through different stages in JFrog?

The best way to promote builds in JFrog is to publish build information and use build promotion to move artifacts through stages. This ensures builds reach release repositories only after passing Xray security checks.

Does JFrog DevOps support automating security checks before artifact release?

Yes, JFrog DevOps supports automating security checks before release by integrating Xray vulnerability scanning into pipelines. You can automatically scan uploaded artifacts and promote them to release repositories only if they pass security checks.