https://github.com/devsecstack/jf-devsecstack-plugin
DevSecStack plugin for Jfrog CLI that helps developers to secure their applications by providing a set of security tools and best practices.
https://github.com/devsecstack/jf-devsecstack-plugin
Last synced: 10 months ago
JSON representation
DevSecStack plugin for Jfrog CLI that helps developers to secure their applications by providing a set of security tools and best practices.
- Host: GitHub
- URL: https://github.com/devsecstack/jf-devsecstack-plugin
- Owner: DevSecStack
- Created: 2024-12-16T12:00:31.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-12-16T12:10:37.000Z (about 1 year ago)
- Last Synced: 2025-02-08T05:29:48.455Z (12 months ago)
- Language: Go
- Size: 18.6 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# 🐸 JFrog CLI DevSecStack Plugin
The JFrog DevSecStack Plugin is a custom plugin for JFrog CLI that adds DevSec related capabilities to your pipeline.
## Features
- Add Cargo (🦀 Rust) dependencies to build-info from Cargo.lock file.
## Installation
To install the plugin, follow these steps:
1. Clone the repository:
```sh
git clone https://github.com/devsecstack/jf-devsecstack-plugin.git
cd jf-devsecstack-plugin
```
2. Build the plugin:
```sh
go build -o jf-devsecstack-plugin
```
3. Publish the plugin:
```sh
export JFROG_CLI_PLUGINS_SERVER=
jf plugin publish devsecstack v1.0.0
```
4. Install the plugin:
```sh
export JFROG_CLI_PLUGINS_SERVER=
jf plugin install devsecstack
```
### 🦀 Cargo Add Dependencies
To use the plugin, run the following command:
```sh
jf devsecstack cargo-add-dependencies [flags]
```
#### Example
```sh
jf devsecstack cad --build-name my-build --build-number 1
```
#### Flags
- `--build-name` (required): Build name.
- `--build-number` (required): Build number.
- `--project` (optional): JFrog project key.
- `--module` (optional): Optional module name in the build-info for adding the dependency.
- `--server` (required): Artifactory server ID.
- `--dry-run` (optional): Set to true to disable communication with Artifactory. Default is false.
#### Environment Variables
- `CARGO_SKIP` (optional): Set to true to skip crago commands (```cargo generate-lockfile```). Default is false.
- `CARGO_LOCKFILE` (optional): Path to the Cargo.lock file. Default is `Cargo.lock`.