jfrog / jfrog/jfrog-cli-security
Are there dependencies of running the jfrog cli other than `jf` itself?
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
I've been trying to run jf audit and jf docker scan in a container built from alpine that contains the executable
https://releases.jfrog.io/artifactory/jfrog-cli/v2-jf/2.77.0/jfrog-cli-linux-amd64/jf
When I've run either command, they produce nice looking results like ✨ No secrets were found ✨but then produce the following error:
failed to run IaC scan: [Thread 2] failed to run IaC scan. Exit code received: fork/exec /jfrog/dependencies/analyzerManager/analyzerManager: no such file or directory
So my question is... do I need to install any other files other than jf for scanning to work? I looked through the installer on https://install-cli.jfrog.io and it doesn't appear to do much else
Thanks in advance
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce jf audit and jf docker scan in the Alpine container using the linked jf executable, then inspect the reported /jfrog/dependencies/analyzerManager/analyzerManager lookup. Check the installer context and scan behavior to determine whether additional runtime files are required; done means documenting the dependency or confirming a packaging issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100