jfrog/jfrog-cli-security

View on GitHub

Go module that encompasses the security commands of JFrog CLI

Stars: 13
Forks: 50
Open beginner issues: 0
Indexed issues: 156
Avg merge: 3d 48m
Merged PRs (30d): 26

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 16, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

156 open issues indexed

Add `rescan` option to JFrogBuildScan task Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 68/100

jfrog/jfrog-cli-security#893 · Opened Sep 4, 2026
Bug Report: jf npm install never populates dependencies in published build-info Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#871 · 1 comment · Opened Sep 2, 2026
jf audit fails with 401 Unauthorized on SCA scan against an Xray HA cluster (regression since 2.103.0) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#817 · Opened Jul 30, 2026
Introduce non-interactive mode to "jf curation-audit" command Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 68/100

jfrog/jfrog-cli-security#824 · Opened Jul 22, 2026
Upgrading from JFrog CLI v2.111.0 to v2.112.0 breaks back-to-back sequential execution of jf audit --gradle Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

jfrog/jfrog-cli-security#794 · Opened Jul 2, 2026
Support .slnx (XML) solution format in jf audit / NuGet & .NET project discovery Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 58/100

jfrog/jfrog-cli-security#785 · Opened Jun 24, 2026
jfrog aud --yarn fails on Yarn v4 despite v2.104.1 adding Yarn v4 support Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

jfrog/jfrog-cli-security#825 · Opened May 26, 2026
Issue: Unable to Perform jf build-scan Due to Xray Indexing Permission Constraints Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/jfrog-cli-security#826 · Opened May 11, 2026
[curation audit] jf ca at npm workspace root treats local workspaces as registry packages Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 52/100

jfrog/jfrog-cli-security#891 · 1 comment · Opened May 8, 2026
[curation audit] jf ca with --working-dirs on npm workspace project fails with ENOWORKSPACES Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

jfrog/jfrog-cli-security#892 · 1 comment · Opened May 8, 2026
add an option to jf build-scan to not wait for the result Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#747 · Opened May 6, 2026
jf audit failed to generate SBOM on maven project Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

jfrog/jfrog-cli-security#737 · Opened Apr 16, 2026
Security Issues in GitHub Step Summary is empty Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#694 · 1 comment · Opened Mar 13, 2026
jf curation-audit / jd audit support for proxy in maven project Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#660 · Opened Feb 9, 2026
Xray cannot scan docker images with SBOM attestation Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/jfrog-cli-security#658 · 1 comment · Opened Feb 6, 2026
jf scan regression issue since jfrog-cli v.2.86.0 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#652 · 1 comment · Opened Jan 27, 2026
jf audit command hangs after finding violations in v2.88.0 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#638 · Opened Jan 8, 2026
pnpm handler ignores InstallCommandArgs Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

jfrog/jfrog-cli-security#626 · Opened Dec 22, 2025
It is possible to force jf audit to calculate nuget dependencies? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 32/100

jfrog/jfrog-cli-security#729 · Opened Dec 17, 2025
[audit] pnpm projects fail to generate SBOM and audits cannot continue Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#728 · 1 comment · 1 reaction · Opened Dec 6, 2025
jf audit fails with Gradle and org.gradle.parallel=true Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

jfrog/jfrog-cli-security#727 · 1 comment · 3 reactions · Opened Dec 5, 2025
JFrog CLI audit does not reflect dependency changes made in subproject build.gradle files Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#603 · Opened Nov 4, 2025
jf docker scan Fails Consistently on Previously Working Images Since 23/10/25 Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#730 · 2 comments · Opened Oct 27, 2025
Gradle 9 Support Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/jfrog-cli-security#585 · 1 comment · 1 reaction · Opened Oct 2, 2025
jf curation-audit support for dotNet project Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#575 · 1 comment · Opened Oct 1, 2025
False positives CVE-2025-58050 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#568 · Opened Sep 17, 2025
jf audit: PEP 621 Support for Poetry Projects Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#560 · Opened Sep 5, 2025
jf docker scan supporting IMAGE ID or not ? Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#540 · Opened Aug 20, 2025
How to user --results command ? Open

question

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

jfrog/jfrog-cli-security#535 · 1 comment · Opened Aug 18, 2025
Apply Default Exclusion Patterns Only to Subdirectories or parameter to control it (Including JAS Scans) Open

improvement

Difficulty 5/5 Over a week Newbie friendliness 35/100

jfrog/jfrog-cli-security#530 · Opened Aug 11, 2025
jf git count-contributors command needs a rate-limiting parameter Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#576 · Opened Aug 11, 2025
jf git count-contributors with --repo-name parameter not working for lists Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#577 · 2 comments · Opened Aug 11, 2025
SIGSEGV when dealing with unsupported file in indexer Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#525 · Opened Aug 6, 2025
jf docker scan fails with "is not a docker command" when --min-severity flag is used without a value Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

jfrog/jfrog-cli-security#536 · Opened Aug 6, 2025
Sarif file missing results after 2.78.0 update Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#578 · 2 comments · 1 reaction · Opened Aug 5, 2025
panic: runtime error: invalid memory address or nil pointer dereference Open

question

Difficulty 4/5 3-5 days Newbie friendliness 32/100

jfrog/jfrog-cli-security#579 · 1 comment · 1 reaction · Opened Aug 1, 2025
No detailed scan report is presented when executiong jf scan commend Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#517 · Opened Jul 30, 2025
jf curation-audit to run on pnpm projects Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#513 · Opened Jul 28, 2025
Are there dependencies of running the jfrog cli other than `jf` itself? Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#592 · 1 comment · Opened Jul 17, 2025
Is there a parameter in jf audit that can be used to prevent uploading the results to the UI page? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

jfrog/jfrog-cli-security#500 · Opened Jul 15, 2025
Npm jf scan issue Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/jfrog-cli-security#502 · 1 comment · Opened Jul 14, 2025
`jf audit --mvn --project=myproject --use-wrapper=true` still tries to use mvn on the PATH Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#495 · Opened Jul 11, 2025
`jf audit --mvn` tries to resolve a `-SNAPSHOT` version from `releaseRepo` Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#496 · 2 comments · Opened Jul 10, 2025
Control the depth of the gradle/maven/npm dependency tree (just like issue#202) Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#491 · Opened Jul 9, 2025
JFrogAudit@1 Support For Exclusions Of Directories As Supported In CLI Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#506 · Opened Jun 27, 2025
Support for Frogbot PR and Repository scanning. Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 42/100

jfrog/jfrog-cli-security#507 · Opened Jun 25, 2025
Add "Watch" Column to Operational Risk Table in Build-Scan Output Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#472 · Opened Jun 16, 2025
Switching to OIDC for Authentication forces advanced security Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/jfrog-cli-security#497 · Opened Jun 5, 2025
Xray scan fails to parse valid CPE from Amazon Linux 2023 (cpe:invalid wfn string) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#458 · 1 reaction · Opened May 28, 2025
How to get table and sarif output at the same time? Open

feature request question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/jfrog-cli-security#457 · 3 comments · Opened May 23, 2025

jfrog/jfrog-cli-security

Get new issues in your inbox