Source Type - Artifacts

JFrog REST APIs

Content Type
REST API
ft:sourceType
Paligo

Use this source type to create a Release Bundle v2 version by collecting source artifacts from a list of path/checksum pairs.

Security: Requires Read permissions to source artifact repository paths; requires Read and Create permissions to the Release Bundles.

Usage restrictions: See here for details.

Sample Usage: POST /lifecycle/api/v2/release_bundle?project=default&async=false --header 'X-JFrog-Signing-Key-Name: my-signing-key' -H 'Content-Type: application/json' --upload-file artifacts.json

Consumes: application/json

Sample Request:

{
    "release_bundle_name": "Commons-Bundle",
    "release_bundle_version": "3.0.0",
    "skip_docker_manifest_resolution": false,
    "source_type": "artifacts",
    "source": {
        "artifacts": [
            {
                "path": "commons-dev-docker-local/commons/1.0.0/manifest.json",
                "sha256": "35888e382c9a035a7e1aa25c22a42da73db4d5393f696e08891498e8e5aaa3e9"
            },
            {
                "path": "commons-dev-maven-local/org/apache/tomcat/commons/1.0.0/commons-1.0.0.pom",
                "sha256": "82a7fc9aa5d3edc1a32df11ecbece5177f0fe1ce2fed3caa6b18837176c1396a"
            },
            {
                "path": "commons-dev-generic-local/commons/release-notes-1.0.0.txt",
                "sha256": "f87e4c72e60300b451739d545afc0251a6e2f4bd1beaa1902ba739455897ecb8"
            }
        ]
    }
}

The request includes the following information:

Property

Description

source_type

Should be set to artifacts.

source.artifacts

The path for each artifact is mandatory. The sha256 is optional.

skip_docker_manifest_resolution

Determines whether to skip the resolution of the Docker manifest, which adds the image layers to the Release Bundle.

The default value is false (the manifest is resolved and image layers are included).

Sample Response: See here for an example.