jfrog / jfrog/jfrog-cli-security
Pull XRay vulnerability data via jfrog command line client
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Artifactory is already scanning all docker images I am pushing for vulnerabilites (CVEs), however, there does not seem to be a jfrog client method to pull the vulnerability scan data. There is only xray functions to scan local docker images. However, it is impractical to have to pull down an image and rescan it when the data already exists in Artifactory. Im requesting an enhancement to be able to pull down the vulnerability xray scan data via the jfrog client per a specified image.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file, test, or entry point is named. Start by locating the security commands and the existing local Docker image XRay scan functionality, then review how the client communicates with Artifactory; done means retrieving vulnerability data for a specified image without pulling and rescanning it.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, go
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100