JFrog & GitHub:
Achieving an Agentic
Software Supply Chain

Two platforms, one experience: closing the source-to-binary gap with agentic development and enterprise software supply chain security.

Book a Demo Take a Tour

The Agentic Solution to Build and Secure Software Faster

The JFrog & GitHub integration unites dev, DevOps, and security teams with unified workflows, agentic insights, self-healing security, and governed agents for efficient, trusted development.

GitHub 2025 Technology Partner of the Year

We’re proud to announce that JFrog has been honored as GitHub’s 2025 Technology Partner of the Year. This recognition underscores the strength of our vision: enabling developers to move fast and securely. This award is a recognition that our integration is both strategic & impactful.

Learn More

Learn More

The Power of GitHub and
the JFrog Platform

Agentic Curation and Remediation for Your Software Supply Chain

This isn’t just AI assistance; it’s agentic remediation for a self-healing software supply chain. By connecting GitHub and the JFrog platform, developers gain automated package curation, context-aware source code remediation, and seamless vulnerability fixes.

Single Pane of Glass for Advanced Security

Centralize code and binary security with a consolidated dashboard for JFrog and GitHub Advanced Security. With scan results in one place, you can improve security posture and visibility from code to production.

Bidirectional Mapping & End-to-End Traceability

Trace releases and published artifacts to their build, GitHub job, and source code. Seamless integration for resolving packages from Artifactory and storing binaries created by GitHub Actions, with build metadata.

Automate Setup of GitHub and JFrog Repositories

Bring powerful automation to the integration setup of your GitHub repositories and the JFrog Platform. With unified SSO (via OIDC), centralized configuration, automated Frogbot deployment, and GitHub Code Security integration, teams gain velocity plus enterprise-grade security.

Ensure Compliance Through Unified Attestations

Seamlessly include GitHub Build Provenance SLSA attestations and other evidence across your SSC, directly into JFrog for streamlined promotions, simplified audits, and easy compliance.

What Customers Think of the GitHub Integration

“We want our developers focused on creativity, not administration. Now we’re reducing complexity and unlocking developer happiness – ultimately making them more productive as a result.”

Khosro Rahbar, Director IT Application Lifecycle Management

It’s going to be even more crucial in this agentic AI world that we have the single pane of glass where we can have that traceability – from source code all the way to the cloud.

Thomas Dohmke, Former CEO

The integration between the JFrog's Software Supply Chain Platform and GitHub's Developer Platform was designed to provide a 'secure by default' developer experience. This collaboration gives developers a single source of truth for code and binaries, and security teams gain full traceability and a unified view to monitor and remediate threats, reducing risk.

Gerard McMahon, Head of ALM Tools and Platforms

The team moved quickly to implement the full JFrog Platform including: JFrog Artifactory, Xray, Advanced Security, and Curation – all integrating seamlessly with GitHub. They also adopted OpenID Connect on a per-build basis, enabling secure, auditable traceability from source code to binaries.

Executive Director & Global Head of Developer Productivity, F100 Financial Services Company

Chatting with GitHub’s Copilot to select the right and secure software package based on the extensive metadata stored in JFrog Catalog can be a game-changer. This integration will significantly enhance the efficiency of Copilot users across the SSC in binary-focused and code environments. This partnership offers the best of both worlds.

John Nuttall, Director of Technology

As developer responsibility has increased the push by many organizations to drive efficiency via tool consolidation is a natural move. This announcement from GitHub and JFrog helps to enable this path, bringing together two of the most well-known platforms developers already use today in a cohesive, end-to-end vision that plays to the strengths of both solutions

Jim Mercer, Program VP of Software Development, DevOps and DevSecOps Research