From 2870d178fad5eba645c816084f50dd42ac3bab40 Mon Sep 17 00:00:00 2001 From: asafa Date: Wed, 14 Aug 2024 17:54:08 +0300 Subject: [PATCH] Fix. --- .../jfrog-cli/cli-for-jfrog-curation.md | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/jfrog-applications/jfrog-cli/cli-for-jfrog-curation.md b/jfrog-applications/jfrog-cli/cli-for-jfrog-curation.md index 477467f..8784b24 100644 --- a/jfrog-applications/jfrog-cli/cli-for-jfrog-curation.md +++ b/jfrog-applications/jfrog-cli/cli-for-jfrog-curation.md @@ -4,20 +4,21 @@ JFrog Curation defends your software supply chain, enabling early blocking of malicious or risky open-source packages before they even enter. Seamlessly identify harmful, vulnerable, or risky packages, ensuring increased security, compliance, and developer productivity. -For more information see: https://jfrog.com/curation/ +For more information see [**here**](https://jfrog.com/curation/) The 'curation-audit' is a JFrog CLI command designed for developers to scan their projects and identify third-party dependencies that violate the restrictions set by the Curation service. This command provides detailed insights into the specific package policies that are being violated, leading to their blockage by the Curation service. Additionally, when feasible, 'curation-audit' may suggest alternative versions of the packages that comply with the Curation policies. ## Supported package managers & build systems -For a full list of the package managers and build systems supported by the curation-audit command and the required Artifactory and Xray versions to use it please see: https://jfrog.com/help/r/jfrog-curation/curation-support-matrix - -curation-audit command supported package managers and build systems: +Curation-audit command supported package managers and build systems: * Npm (npm) * Maven (mvn) - Requires xray 3.92 and above, and Artifactory 7.82 and above * Pip (pip) - Requires xray 3.92 and above, and Artifactory 7.82 and above * Go (go) - Requires xray 3.92 and above, and Artifactory 7.87 and above + +For a full list of the package managers and build systems supported by the curation-audit command and the required Artifactory and Xray versions to use it please see [**this matrix**](https://jfrog.com/help/r/jfrog-curation/curation-support-matrix) + *** ### Commands @@ -28,7 +29,9 @@ Audit your Project with JFrog CLI curation-audit command Prerequisites: -Make sure your JFrog Artifactory admin configured the curated remote repository you are using during your build process. For more information refer your Artifactory admin to: https://jfrog.com/help/r/jfrog-curation/configure-curation-pass-through +Make sure your JFrog Artifactory admin configured the curated remote repository you are using during your build process. For more information refer your Artifactory admin to [**this page**](https://jfrog.com/help/r/jfrog-curation/configure-curation-pass-through) +

**Note**: Some package types require 'pass-through' curation configuration on the remote repositories in Artifactory, in addition to configuring curation on them. + 1. **Connect JFrog CLI to JFrog Platform** @@ -56,8 +59,7 @@ Make sure your JFrog Artifactory admin configured the curated remote repository * **PIP:** * Set the resolved repository using the [**jf pipc**](https://docs.jfrog-applications.jfrog.io/jfrog-applications/jfrog-cli/cli-for-jfrog-artifactory/package-managers-integration#setting-python-repository) command inside the project directory (The only package installer supported for now by Python is "pip"). * **GO:** - * Set the resolved repository using the [**jf goc - **](https://docs.jfrog-applications.jfrog.io/jfrog-applications/jfrog-cli/cli-for-jfrog-artifactory/package-managers-integration#examples-4) command inside the project directory. + * Set the resolved repository using the [**jf goc**](https://docs.jfrog-applications.jfrog.io/jfrog-applications/jfrog-cli/cli-for-jfrog-artifactory/package-managers-integration#examples-4) command inside the project directory. #### Commands Params