Supported Technologies

JFrog Security User Guide

Public repositories supported by Curation and curation-audit cli support.

Public repository namePublic repository URLs supported (configure in Artifactory remote repository)Minimal Artifactory VersionMinimal Curation Version (aka Xray Version)Minimal JFrog cli version (for curation-audit)Catalog Support (UI & API)
npm Registryhttps://registry.npmjs.org

7.63.5

(Both Curation service & curation-audit cli)

3.78.x

(Both Curation service & curation-audit cli)

2.38.3Yes
Docker Hubhttps://registry-1.docker.io

7.63.5

(Curation service only)

3.82.10

(Curation service only)

Not availableAPI Only
Maven

https://repo.maven.apache.org/maven2

https://repo1.maven.org/maven2.

https://maven.google.com


https://maven.artifacts.atlassian.com/

https://plugins.gradle.org/m2/

https://repository.jboss.org/maven2/

https://repo.jenkins-ci.org/releases/

https://maven.gridgain.com/nexus/content/repositories/external/

https://repository.mulesoft.org/releases/

https://repository.sonatype.org/content/groups/forge/

https://packages.confluent.io/maven/

https://repository.cloudera.com/service/rest/repository/browse/repo/

7.63.5

(Curation service only)

7.82.2

(including curation-audit cli)

3.78.x

(Curation service only)

3.92.7

(including curation-audit cli)

2.53.1Yes
The Python Package Index (PyPI)https://files.pythonhosted.org/

7.63.5

(Curation service only)

7.82.2

(Curation service only)

3.78.x

(Curation service only)

3.92.7

(Curation service only)

2.62.0 (pip support)Yes
Go Packageshttps://proxy.golang.org/

7.63.5

(Curation service only)

3.92.7

(Curation service only)

2.58.1API Only
Nuget Galleryhttps://www.nuget.org/

7.80

(Curation service only)

3.92.7

(Curation service only)

2.68.0Yes
Conan Central Repositoryhttp://center.conan.io/

7.63.5

(Curation service only)

3.95.x

(Curation service only)

Coming soonYes
Hugging Facehttps://huggingface.co/

7.77.3

(Curation service only)

3.95.x

(Curation service only)

N/AYes
RubyGemshttps://rubygems.org/7.63.53.98.0N/AYes
Gradle
(See note below)
https://repo1.maven.org/maven2

https://repo.maven.apache.org/maven2

https://maven.google.com
7.63.53.101.02.77.0API Only
Crates (Rust)https://index.crates.io7.63.53.118N/A
Support native messaging
Yes
Self-Hosted version 1.16
Condahttps://repo.anaconda.com/pkgs/main7.1173.125.2N/AYes
VS Code
(Requires an Ultimate or Unified Security Bundle)
https://open-vsx.org/vscode/gallery7.125.63.131.15N/AYes

Note: To support Curation for remote Gradle plugins, you must use a virtual repository configured in a specific order:

  1. Maven Central remote repository, first repo.
  2. Gradle repository, under Maven

This order is mandatory because the Gradle client automatically redirects to Maven Central for binaries.