Artifactory Archives

GitHub Tried to Change the Checksum for Release Archives. You Should Start Hosting Your Own.

January 31, 2023 Christopher McArthur, Conan Developer Advocate | 3 min read

Yesterday, GitHub changed how the archives they provided are made. The result of this change surprised developers, triggering pipeline failures all over the world in most ecosystems. According to this GitHub post, this is a consequence of recent changes to Git itself, released almost six months ago and just deployed within GitHub now with unforeseen…

Detecting Malicious Packages and How They Obfuscate Their Malicious Code

January 30, 2023 Jonathan Sar Shalom, Director of Threat Research | 14 min read

Wow! We made it to the last post in our Malicious Packages series. While parting is such sweet sorrow, we hope blogs one, two, and three provide insights into the havoc malicious packages cause throughout your DevOps and DevSecOps pipelines. In the prior posts: We explained what software supply chain attacks are and learned the…

What Is Artifactory? | JFrog

April 30, 2025 JFrog Team | 9 min read

The modern software supply chain is complex. JFrog internal data shows that most enterprises use 12+ package types and 90 percent of applications depend on open source software. Additionally, there is a wide array of tools to support the software development process, including Source Code Managers (SCMs), Integrated Development Environments (IDEs), CI/CD suites, and more.…

What’s in your build? Building Images in OpenShift with Artifactory and JFrog CLI

December 14, 2022 Asaf Gabai, Software Engineer, JFrog Ecosystem Team | 3 min read

Red Hat OpenShift is an enterprise Kubernetes container platform. It lets you build Docker images and use them to deploy your applications on a cloud-like environment (even if it’s not really on the cloud, rather a simulated cloud environment). Images built in OpenShift can be easily pushed into JFrog Artifactory - JFrog’s leading universal repository…

IDC LINK: JFrog Introduces New Software Supply Chain Security Capabilities

December 6, 2022 The JFrog Team | 3 min read

As software becomes increasingly complex, the need to secure the software supply chain becomes more important — and more difficult. But how can businesses address the challenges of securing their software supply chain? The International Data Corporation (IDC) offers critical insight. Following the release of JFrog Advanced Security on October 18, 2022 – the world’s…

Tour Terraform Registries in Artifactory

October 26, 2022 Rakesh Krishna, Sean Pratt, Krishna Jonnalagadda | 8 min read

Why should you keep Terraform module, provider, and backend registries in a binary repository manager like Artifactory? Because, like your builds, packages, and other artifacts, your Terraform files are a key part of your software supply chain. Terraform is a widely used open source infrastructure-as-code (IaC) software tool to manage the entire lifecycle of cloud…

Enterprise Package Management for Everyone

October 25, 2022 The JFrog Team | 5 min read

Suppose you asked developers in the mid-2000s how they managed and compiled their binaries. You'd probably hear some anxiety-inducing answers (e.g., storing packages in git repositories or insecure file stores). Thankfully, organizations currently have various options for managing their first or third-party packages, dependencies, and containers. Different tools offer different levels of package support and…

JFrog Joins Rust Foundation as Platinum Member

September 6, 2022 Lori Lorusso, JFrog Open Source Program Manager & Stephen Chin, JFrog VP of Developer Relations | 3 min read

The technology ecosystem is continually evolving but one truth remains, if there is a new and emerging coding language that captures the heart and minds of developers JFrog will be there. JFrog provides a DevOps Platform to store and secure its artifacts while engaging with the community and foundations that support developers using that language.…

JFrog Providers Support the Terraform Community

August 29, 2022 Sean Pratt, Product Marketing Manager | 4 min read

If you’re reading this blog you’re probably at least somewhat familiar with Hashicorp Terraform and the value it brings to managing the deployment and provisioning of infrastructure resources at scale. We’re big fans and users of it ourselves here at JFrog (see how in our recent webinar!). Terraform is one of the most, if…

How To Put Cloud Nimble to Work to Segment Dev/Test from Production

August 23, 2022 John Cabaniss and Gianni Truzzi | 7 min read

In every workplace, most work gets done at the most cluttered desks. Yet the business also requires an orderly front office to run efficiently. It’s much the same with your DevOps pipeline environments, as the rough and tumble process of innovating code must ultimately produce cleanly released applications. Continuous integration means that developers perform many…

Welcome to the JFrog Blog

Latest from Artifactory :

Taking a GenAI Project to Production