Welcome to the JFrog Blog

Latest:

How JFrog’s AI-Research Bot Found OSS CI/CD Vulnerabilities to Prevent Shai Hulud 3.0

March 5, 2026 Barak Haryati, JFrog Senior Director of Product Security

18 min read

Recent incidents have proven that Continuous Integration (CI) workflows are the new battleground for software supply chain attacks. Security Pitfalls in GitHub Actions workflows, such as the unsanitized use of pull request (PR) data, can allow attackers to execute malicious code during CI runs with devastating consequences. For example, the high-profile "S1ngularity" attack on the…

Read More

All Blogs

NIS2 Compliance in 2026: Compliance Doesn’t Have to Mean Complexity

NIS2 Compliance in 2026: Compliance Doesn’t Have to Mean Complexity

March 2, 2026 Danny Parizada, JFrog Senior Solution Engineer | 7 min read

Originally published February 2025 and updated March 2026. The Network and Information Systems Directive 2 (NIS2) is the European Union’s effort to fortify cybersecurity across critical industries and services. Building on the original NIS Directive, NIS2 has broadened its scope, introduced stricter requirements, and placed greater emphasis on supply chain security. As we move further…
Read More
JFrog Earns Microsoft Solutions Partner with Certified Software Designation for Azure

JFrog Earns Microsoft Solutions Partner with Certified Software Designation for Azure

March 5, 2026 Dante Zannoni, JFrog Director, Cloud Alliances - Azure Eyal Zafrani, JFrog DevOps Team Leader - Cloud Engineering Eran Nissan, JFrog Senior DevOps Architect - DevX Shiran Melamed, DevOps Group Leader | 6 min read

We’re excited to announce that JFrog has officially earned the Microsoft Solutions Partner with certified software designation for Azure. This status is granted to partners who complete a technical review audit for interoperability with Microsoft products and demonstrate a consistent track record of customer success. For our customers, this means the JFrog Software Supply Chain…
Read More
Native Nix Support in Artifactory: The Binary Cache for the Enterprise

Native Nix Support in Artifactory: The Binary Cache for the Enterprise

February 25, 2026 Tom Arie, JFrog Product Manager | 6 min read

The "works on my machine" era is officially over. Nix is changing the way we think about software by treating packages as functional, immutable values, ensuring that a build works exactly the same way every time, on every machine. But while Nix excels on a local laptop, scaling that level of reproducibility across a global…
Read More
JFrog Takes Software Resilience to the Next Level with 99.99% Uptime SLA

JFrog Takes Software Resilience to the Next Level with 99.99% Uptime SLA

February 24, 2026 Sean Pratt, Senior Manager, JFrog | 5 min read

Software delivery is no longer a back-office function; it’s the heartbeat of the modern enterprise. While a 99.9% uptime SLA for essential software delivery services works for many, the acceleration of software velocity has made the "three-nines" benchmark a possible liability. For high performing software organizations, and those delivering critical services, nine hours of annual…
Read More
From Prompt to Production: The New AI Software Supply Chain Security

From Prompt to Production: The New AI Software Supply Chain Security

February 23, 2026 Yoav Landman, CTO & Co-founder, JFrog | 7 min read

Listen to a NotebookLM podcast version of the blog:   When Anthropic announced Claude Code’s new security scanning capabilities, following the announcement of OpenAI's Aardvark, it marked an important moment for the industry. For the first time, expert-level security review is becoming embedded directly into the act of writing code. Subtle, context-dependent vulnerabilities can now…
Read More
The Need for Clean in the AI Era

The Need for Clean in the AI Era

February 19, 2026 Sean Pratt, Senior Manager, JFrog | 4 min read

In the AI era, software and new models are being born at a breakneck pace—but they’re also bringing a lot of "baggage" into the world. While AI coding agents are busy accelerating innovation, they’re also excellent at generating a massive byproduct: “digital dust.” Between obsolete releases, orphaned dependencies, and massive model versions, your repository may…
Read More
Why I’m Finally Ditching YUM for DNF in 2026 (And You Should, Too)

Why I’m Finally Ditching YUM for DNF in 2026 (And You Should, Too)

February 19, 2026 Asaf Waizman, JFrog RVP, Solution Engineering | 5 min read

If you’ve been managing Red Hat-based systems as long as I have, yum install is likely hardcoded into your muscle memory. For decades, YUM (Yellowdog Updater, Modified) served as the backbone of RPM Linux-based distributions, getting us through countless server setups and late-night patches. But the era of YUM is officially over. With RHEL 9,…
Read More
Vulnerability or Not a Vulnerability?

Vulnerability or Not a Vulnerability?

February 16, 2026 Jonathan Sar Shalom, JFrog Director of Threat Research | 5 min read

Disputed CVEs: It’s Not a Bug, It’s a Debate Every CVE starts as a vulnerability claim, but not every claim ends in agreement. Between researchers racing to disclose vulnerabilities, and open-source maintainers guarding the stability and reputation of their projects, a gray zone appears where “vulnerability” becomes a matter of debate. This is the story…
Read More

Popular Tags