jfrog / jfrog/jfrog-cli-security
jf audit to store results in artifactory
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
The results from jf audit currently are simply returned to the CLI. This makes it hard to track and store these results for future risk scoring and understanding a given app's security posture.
Describe the solution you'd like to see
A clear and concise description of the new feature.
Give an option for storing the results of a scan in Artifactory and return the link/ path to the results within Artifactory
Describe alternatives you've considered
If applicable, a clear and concise description of any alternative solutions or features you've considered.
The other option we've been working with is making our own Artifactory repository to upload generic blobs to to store the results.
Additional context
Add any other context or screenshots about the feature request here.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files or tests. Start at the jf audit command and trace where scan results are returned to the CLI; clarify the Artifactory storage interface and the expected result link or path, then define tests covering storage and returned output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100