jfrog/jfrog-cli-security

View on GitHub

Go module that encompasses the security commands of JFrog CLI

Stars: 13
Forks: 50
Open beginner issues: 0
Indexed issues: 156
Avg merge: 3d 48m
Merged PRs (30d): 26

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 16, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

156 open issues indexed

Build-scan option not showing Security Violations after upgrade to 2.74.1 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#406 · 3 comments · Opened Apr 7, 2025
jfrog audit --mvn not work with disabled repository id "central" on pom.xml Open

question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#404 · 1 comment · Opened Apr 3, 2025
Generate SBOM when scanning published builds using JF CLI Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#402 · 1 reaction · Opened Apr 1, 2025
Jfrog CLI to support SBOM standards Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 35/100

jfrog/jfrog-cli-security#386 · 1 reaction · Opened Mar 11, 2025
`jf docker scan --fail=true` does not actually fail Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

jfrog/jfrog-cli-security#394 · 1 comment · Opened Mar 6, 2025
Improper license classification when performing license auditing Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#427 · Opened Mar 5, 2025
build-scan command does not log vulnerabilities Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#387 · 1 comment · 1 reaction · Opened Mar 5, 2025
JFrog Build Scan - "Build is not selected for indexing" Error Open

Difficulty 3/5 1-2 days Newbie friendliness 30/100

jfrog/jfrog-cli-security#437 · Opened Mar 5, 2025
Ignore pip and setuptools vulnerabilities on 'jf audit' Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 42/100

jfrog/jfrog-cli-security#388 · 3 reactions · Opened Mar 4, 2025
JAS scan - Add additional fields : CWE and CVSS vectors Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#294 · Opened Jan 23, 2025
JAS scan - return scanner result when applicability is false Open

feature request

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

jfrog/jfrog-cli-security#288 · Opened Jan 15, 2025
"jf audit " for pnpm project scan did not support monorepo Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

jfrog/jfrog-cli-security#283 · 2 comments · Opened Jan 8, 2025
JFrogDocker@1 XRay Image scan should list the issues before erroring out Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#429 · Opened Dec 17, 2024
jf docker scan is not failing build pipelines as expected Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#247 · 1 comment · 1 reaction · Opened Nov 26, 2024
In JF CLI v 2.71.3, scanning with --repo-path does not generate violations Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#233 · 1 comment · Opened Nov 13, 2024
jf ver 2.71 Security Violations table not displaying correctly for ANSI colorized output Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#224 · Opened Nov 5, 2024
JF Docker Scan in local is not working as expected Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#208 · 1 comment · Opened Oct 16, 2024
Add --silent option to disable console output Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#378 · Opened Oct 16, 2024
Add functionality to add xray watch recipients using Go SDK Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 25/100

jfrog/jfrog-cli-security#438 · Opened Oct 14, 2024
add Xray scan id to SARIF output Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#199 · 1 comment · 1 reaction · Opened Oct 4, 2024
jf audit fail to scan pip dependencies Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#197 · 1 comment · Opened Sep 30, 2024
JFrog CLI Task with dynamic command list Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/jfrog-cli-security#436 · Opened Sep 17, 2024
Security Violations and License Compliance Violations table not displaying in console output Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

jfrog/jfrog-cli-security#178 · 3 comments · Opened Sep 13, 2024
Execution failed for task ':generateDepTrees' using jf audit command for gradle project. Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/jfrog-cli-security#171 · 1 comment · Opened Sep 10, 2024
jf audit fail with Gradle version 8 and anonymous repository access Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#167 · Opened Sep 5, 2024
jf scan failed to index tar file as container image Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#150 · 2 reactions · Opened Aug 20, 2024
Jfrog scan does not detect license written in a java file Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#115 · 1 comment · Opened Jul 23, 2024
Failure while reading containerd-sourced images Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 42/100

jfrog/jfrog-cli-security#492 · 7 comments · 8 reactions · Opened Jul 16, 2024
jf audit --mvn fail on mvn version Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#89 · Opened Jun 20, 2024
Suppressing GOMAXPROCS in info log Open

question

Difficulty 3/5 1-2 days Newbie friendliness 42/100

jfrog/jfrog-cli-security#80 · Opened Jun 7, 2024
build-info icon not showing Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/jfrog-cli-security#447 · 1 reaction · Opened Jun 5, 2024
jf docker scan ubuntu:latest fails, Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#319 · Opened May 6, 2024
jf docker scan does not work with Docker Engine 25 and above Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#330 · 2 comments · Opened Apr 25, 2024
jf docker scan does not support command option auth Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 38/100

jfrog/jfrog-cli-security#53 · 2 comments · Opened Apr 11, 2024
jfrog docker scan does not report any vulnerabilities when image is provided with sha256 digest Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#331 · Opened Apr 9, 2024
Add a --format json to the JFrog audit command Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#434 · 1 reaction · Opened Mar 29, 2024
Request to have a Ondemand Scanning results URL in the output of On demand Scanning Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#375 · 2 comments · Opened Mar 15, 2024
Results of build scan via JFrog CLI (or Azure DevOps plugin) are different from UI results Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#333 · Opened Mar 1, 2024
The 'jf docker scan <container image>" command doesn't provide the total count of findings for each severity category. Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#354 · Opened Feb 29, 2024
JFrog Xray V2 service connection issues in gui validation Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/jfrog-cli-security#428 · 1 comment · Opened Feb 23, 2024
jf docker scan fails to extract indexer Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 20/100

jfrog/jfrog-cli-security#332 · 1 reaction · Opened Feb 7, 2024
TempDir is not getting created when the jfrog docker scan command is ran. Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#439 · Opened Feb 3, 2024
Support for Artifactory XRay V2 Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#509 · Opened Jan 26, 2024
Support for Gradle dependency constraints in security scan Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/jfrog-cli-security#373 · Opened Jan 2, 2024
Jf docker scan results to add "Impact Pact" column Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#355 · 1 comment · Opened Dec 17, 2023
jf scan failed to index tar file as container image and exits with an unexpected exit code Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/jfrog-cli-security#334 · 7 comments · Opened Nov 28, 2023
jf scan Failed to index tar file as container image and exits with exit code 0 Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

jfrog/jfrog-cli-security#335 · 3 comments · Opened Nov 28, 2023
jf audit to store results in artifactory Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/jfrog-cli-security#356 · 1 reaction · Opened Nov 21, 2023
JAS scan results should be displayed even if SCA failed Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#336 · Opened Nov 15, 2023
Exclude test dependencies while running jf audit for a Maven project Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/jfrog-cli-security#357 · 2 comments · 4 reactions · Opened Nov 9, 2023

jfrog/jfrog-cli-security

Get new issues in your inbox