Skip to content

Conversation

@basel1322
Copy link
Collaborator

@basel1322 basel1322 commented Nov 20, 2025

New Command

I added support for running curation checks on Docker images using the following command:

jf ca --image <RT-url>/<repository>/<image>:<tag>

Same as docker pull command.
This command allows users to run the curation engine directly on a Docker image stored in Artifactory (or in an upstream remote registry) without pulling the image locally.

How It Works Internally

When the command is executed, the CLI performs the following steps:

Fetch Docker Manifest

The CLI retrieves the image’s manifest and configuration from the registry.
This includes:

Image layers (SHA digests)

Extract and Identify Layers

All layer digests listed in the manifest are collected and treated as “packages” for curation evaluation.

Run Curation Rules on Each Layer

Each layer is checked against the configured policy conditions.

Example:
image

@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Nov 20, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Nov 20, 2025
@basel1322 basel1322 changed the base branch from main to dev November 20, 2025 15:56
@basel1322 basel1322 self-assigned this Nov 20, 2025
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Nov 20, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Nov 20, 2025
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Nov 21, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Nov 21, 2025
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Nov 24, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Nov 24, 2025
@basel1322 basel1322 force-pushed the docker-curation-supprot branch from f7e72df to 493aead Compare November 27, 2025 21:50
@basel1322 basel1322 force-pushed the docker-curation-supprot branch from 1ca434f to ff915c5 Compare December 10, 2025 12:20
@basel1322 basel1322 force-pushed the docker-curation-supprot branch from e25245f to a814b8d Compare December 10, 2025 21:56
@basel1322 basel1322 requested a review from asafambar December 10, 2025 22:02
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Dec 10, 2025
}

var (
jfrogSubdomainPattern = regexp.MustCompile(`^([a-zA-Z0-9]+)-([a-zA-Z0-9-]+)\.jfrog\.io$`)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

are we sure jfrog images repos always include ".jfrog" ?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As far as ik and worked before, yes.
IF we have Cname, it works the same as selfhosted

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what it means works the same as selfhosted?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the subdomain of on perm customers.
I also found a KB Which explains each one of them and made sure I follwed it

@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Dec 21, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Dec 21, 2025
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Dec 22, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Dec 22, 2025
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Dec 22, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Dec 22, 2025
@basel1322 basel1322 added the safe to test Approve running integration tests on a pull request label Dec 22, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Dec 22, 2025
@attiasas attiasas added the new feature Automatically generated release notes label Dec 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

new feature Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants