JFrog DevOps
Trusted76/100Manage JFrog Artifactory repositories, artifacts, Docker registry, ML models (JFrog ML / AI Catalog), build info, and Xray security scanning (with SPDX / CycloneDX / VEX SBOMs) for DevOps and MLOps workflows. Use when user asks about JFrog, Artifactory, Xray, Curation, Frogbot, AI Catalog, artifact management, Hugging Face / MLflow model registry, Docker registry, build promotion, vulnerability scanning, SBOM generation, OIDC with GitHub Actions, or DevOps artifact pipeline. Covers REST API operations, JFrog CLI 2.103+ usage, and security scanning patterns. Do NOT use for general Docker or CI/CD questions unrelated to JFrog.
Trust score 76/100 (Trusted) · 25+ installs · 4 GitHub contributors · MIT license
Managing software packages and securing the supply chain has become a central DevOps challenge. JFrog Artifactory and Xray are powerful tools, but their configuration is complex and requires deep expertise. Between setting up repositories, managing permissions, running security scans, and analyzing results, DevOps teams spend significant time on routine maintenance instead of improving processes.
skills-ilHow to use this skill
Not sure how? Read the guide- 1. Click "Download ZIP" to download the skill files.
- 2. Open Claude Desktop and go to Customize > Skills.
- 3. Click "+" and select "Upload a skill", then upload the ZIP file.
- 4. Start a new conversation. The skill will activate automatically when relevant.
Developers? Install via command line (CLI)
npx skills-il add skills-il/developer-tools@v1.2.0-jfrog-devops --skill jfrog-devops -a claude-codeWhen to Apply
- When managing Artifactory repositories (local, remote, virtual)
- When integrating JFrog CLI into CI/CD pipelines (Jenkins, GitHub Actions, GitLab)
- When running Xray security scans on builds or Docker images
- When configuring JFrog as a Docker registry proxy
- When promoting artifacts across environments (dev to staging to prod)
Try These Prompts
I want to set up JFrog Artifactory On-Prem for a Node.js project. What are the initial configuration steps and how do I set up a virtual repository?
I have added JFrog Xray to my CI pipeline. How do I configure a policy that blocks the build if there is a critical CVE in any dependency?
I have several teams that need different access levels in Artifactory. What is the correct way to manage Groups and Permission Templates?
Frequently Asked Questions
Changelog
Add JFrog ML (March 2025, from Qwak 230M USD acquisition June 2024) + AI Catalog (Sept 2025) for ML model management. Hugging Face migration June 2026: legacy HF repo type to new Machine Learning layout (Artifactory 7.111.1+, one-way). JFrog Pipelines EOL May 1 2026 (migrate to GitHub Actions + JFrog CLI). JFrog CLI 2.103.0 (April 29 2026) with Conan V2 + uv. Xray SBOM first-class: SPDX, CycloneDX, VEX, CBOM. OIDC recommended for GitHub Actions.
May 20, 2026
Stripped em dashes from the scripts and corrected the English display name.
May 14, 2026
JFrog Pipelines EOL warning (May 1, 2026), API key deprecation note, OIDC for CI, softened il-central-1 region claim.
Apr 25, 2026
Related Skills
Author: skills-ilCompare cloud hosting costs for Israeli startups and developers across AWS (il-central-1 Tel Aviv), Azure (Israel Central), GCP (me-west1 Tel Aviv), Oracle Cloud (il-jerusalem-1 Jerusalem), and Israeli providers like Kamatera. Use when the user needs to evaluate cloud pricing with Israel-specific considerations including data residency under Privacy Protection Law Amendment 13, latency from Tel Aviv, NIS billing options, startup credit programs (AWS Activate, Google for Startups, Microsoft Founders Hub, Israel Innovation Authority Telem program with subsidized Nvidia B200 GPUs), and FinOps cost optimization strategies. Do NOT use for comparing on-premise hosting, colocation services, or non-cloud SaaS pricing.
Author: skills-ilGuide developers in integrating Israeli agritech tools and precision agriculture platforms including CropX (soil monitoring), Netafim GrowSphere (IoT irrigation), Taranis (crop intelligence), and the broader Israeli agritech ecosystem (approximately 600-750 companies per Start-Up Nation Central agrifoodtech). Use when user asks about agritech APIs, precision agriculture, smart irrigation, "hashkaya cham", crop monitoring, pest detection, Israeli agriculture tech, or needs to build farm management software. Covers irrigation optimization, pest detection, climate data integration, and Israeli agricultural context. Do NOT use for general gardening advice or non-agricultural IoT projects.
Author: skills-ilConvert between Hebrew (Jewish) calendar and Gregorian dates, look up Israeli holidays, format dual dates for Israeli documents, and calculate Israeli business days. Use when user asks about Hebrew dates, "luach ivri", Jewish calendar, Israeli holidays, "chagim", Shabbat times, or needs dual-date formatting for Israeli forms. Do NOT use for Islamic Hijri calendar or non-Israeli holiday calendars.
Use at your own risk. Terms of Use · Security
Want to build your own skill? Try the Skill Creator · Submit a Skill