Release Bundle v2 Repositories

JFrog Artifactory Documentation

JFrog Artifactory
Content Type
User Guide

A Release Bundle v2 is stored as self-contained evidence in a read-only repository with the special package type, ReleaseBundles. The Release Bundle repository is created automatically when the first Release Bundle is created.

The Release Bundle specification is stored as a JSON file located under the path {rb-repository-key}/{rb-name}/{rb-version} and is signed with a DSSE signature in a Base64-encoded envelope.

In addition to the Release Bundle specification, each Release Bundle contains a snapshot of all included artifacts. Deleting any source artifact from the original path does not compromise the consistency of the contents of the Release Bundle.

The name of the repository used for all Release Bundles created outside the context of a specific project is release-bundles-v2. For project-specific Release Bundles, the following prefix is added to the name: {project-key}-release-bundles-v2.Projects


Any attempt to add a prefix to the Release Bundle repository name that does not match the project name will result in an error.