jfrog-security

Cursor Rule

Supply-chain security practices when adding or updating dependencies

JFrog Platform integration with MCP, security skills, supply-chain best practices, and JFrog MCP Gateway governance for adding, removing, and listing MCP servers.

Created by JFrogVerified by CursorView Source

Rules1

jfrog-securitySupply-chain security practices when adding or updating dependencies

Subagents1

supply-chain-securityAudits dependencies and artifacts for vulnerabilities, license compliance, and curation policy violations using JFrog Platform data.

Skills1

jfrog-platformUse when working with the JFrog Platform -- Artifactory (repositories, artifacts, builds, AQL, replication, federation), Security/Xray (vulnerabilities, CVEs, policies, watches, SBOM, SAST, secrets detection), Access (tokens, users, groups, permissions, projects, RBAC), Distribution (release bundles, promotion, environments, edge nodes, evidence), Curation (package firewall, blocked packages, waivers), AppTrust (application entities, versions, trusted releases), Runtime (clusters, running images, sensors), Mission Control (JPDs, deployment health, licenses), Workers (serverless TypeScript, event hooks), CLI (jf command, jf rt, jf audit, jf scan), and architectural patterns/best practices. Triggers on mentions of any JFrog product, artifactory, xray, security, access token, curation, distribution, release bundle, apptrust, runtime, mission control, worker, jf command, pattern, or best practice.

Hooks1

sessionstartHook: sessionStart

MCP1

jfrog