JFrog Security Feature
AI Editor Extension repositories are available as part of the Unified Security and Ultimate Security bundles. For more information, see Security Bundles.
AI Editor Extension repositories in Artifactory are a secure caching proxy for Integrated Development Environment (IDE) extensions like VSCode, Cursor, and Windsurf. By proxying public marketplaces like Visual Studio Marketplace, Artifactory gives you control over the IDE plugins used by your developers. This level of control helps secure your development environments by caching and scanning extensions for vulnerabilities and applying Curation policies to prevent the use of unapproved plugins.
Artifactory supports the following capabilities for AI Editor Extension repositories:
Remote Repository Proxy: Proxy and cache extensions from the public marketplaces that support
.visx.Secure Your Software Supply Chain: Provide a secure, centralized location to vet and store IDE plugins, minimizing the risk of introducing malicious code into your development environments.
JFrog Curation Integration: Apply Curation policies to block or approve extensions, preventing risky or unwanted plugins from being downloaded by developers.
VSCode-based IDE Support: Designed for Visual Studio Code, Cursor, and Windsurf.
Native Extension Installation: Browse and install extensions natively in your IDE, selecting from the approved and secured extensions in your Artifactory marketplace proxy.