jfrog / jfrog/jfrog-cli-security

jf audit to store results in artifactory

Open
#356 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

feature request
Dominant language
Go
Stars
13
Forks
50
Avg merge
3d 48m
Merged PRs (30d)
26

Description

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
The results from jf audit currently are simply returned to the CLI. This makes it hard to track and store these results for future risk scoring and understanding a given app's security posture.

Describe the solution you'd like to see
A clear and concise description of the new feature.
Give an option for storing the results of a scan in Artifactory and return the link/ path to the results within Artifactory

Describe alternatives you've considered
If applicable, a clear and concise description of any alternative solutions or features you've considered.
The other option we've been working with is making our own Artifactory repository to upload generic blobs to to store the results.

Additional context
Add any other context or screenshots about the feature request here.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files or tests. Start at the jf audit command and trace where scan results are returned to the CLI; clarify the Artifactory storage interface and the expected result link or path, then define tests covering storage and returned output.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.