/

jfrog-security

Cursor Rule

Supply-chain security practices when adding or updating dependencies

JFrog Platform integration with MCP, security skills, and supply-chain best practices.

Created by JFrogVerified by CursorView Source

jfrog-securitySupply-chain security practices when adding or updating dependencies

supply-chain-securityAudits dependencies and artifacts for vulnerabilities, license compliance, and curation policy violations using JFrog Platform data.

jfrog-platformJFrog Platform specialist for Artifactory, Xray, and Curation workflows. Use when user mentions JFrog, Artifactory, Xray, repositories, vulnerabilities, curation, artifact search, AQL, DevSecOps reports, license compliance, or supply chain security. Triggers on "is this package safe", "do we use X", "are we exposed to CVE-X", "find artifact", "create a project", "check curation status", "security report". Do NOT use for CI/CD build info, user/permission management, Xray policy config, or artifact promotion.