JFrog CLI Plugins allow enhancing the functionality of JFrog CLI to meet the specific user and organization needs. The source code of a plugin is maintained as an open source Go project on GitHub. All public plugins are registered in JFrog CLI's Plugins Registry. The Registry is hosted in this GitHub repository. The plugins directory includes a descriptor file for each plugin included in the Registry.
After a plugin is included in this Registry, it becomes available for installation using JFrog CLI. JFrog CLI version 1.41.1 or above is required. To install a plugin included in this registry, run the following JFrog CLI command - jf plugin install plugin-name.
| env-verify | This plugin checks whether the Java environment and command line options of your log4j-enabled Java application, allow for the exploitation of CVE-2021-44228. |
| scan-cve-2021-45046-config | This plugin scans a root-folder and all the archive files in it, looking for probable log4j configuration files. Inside each archive, the plugin looks for configuration options which may enable an attacker to exploit CVE-2021-45046. |
| scan-log4j-calls-jar | This plugin recursively scans all .jar files in a root-folder. For each jar file, the plugin prints out the locations (class name and method name) of calls to info/warn/error/log/debug/trace/fatal methods of log4j2.Logger. |
| scan-log4j-calls-src | This plugin recursively scans all .java files in a root-folder. For each file, the plugin prints out the locations (file name and corresponding code lines) of calls to log4j2 logging methods. |
| scan-log4j-versions | This plugin recursively scans a root folder for .jar and .war files. For every file that is detected, the plugin looks for log4j/core/net/JndiManager.class and log4j/core/lookup/JndiLookup.class. |
| benchmark | This plugin is for measuring upload and download speeds to and from an Artifactory instance. |
| build-deps-info | The build-deps-info plugin prints the dependencies' details of a specific build, which has been previously published to Artifactory. |
| build-report | This JFrog CLI plugin prints a report of a published build info in Artifactory, or the diff between two builds. |
| cve-impact-check | This plugin allows checking via Xray if there are any impacted artifacts on a specific env/jfrog platform. It requires the artifacts to be already indexed by Xray. |
| file-spec-gen | This plugin provides an easy way for generating file-specs json. |
| JCheck | A Micro-UTP, plug-able sanity checker for any on-prem JFrog platform instance. |
| jfrog-yocto | This plugin allows integrating Yocto builds with the JFrog Platform. |
| live-logs | The JFrog Platform includes an integrated Live Logs plugin, which allows customers to get the JFrog product logs (Artifactory, Xray, Mission Control, Distribution, and Pipelines) using the JFrog CLI Plugin. The plugin also provides the ability to cat and tail -f any log on any product node. |
| metrics-viewer | A plugin or standalone binary to show open-metrics formatted data in a terminal based graph. |
| Piperika | This is a JFrog Pipelines CLI utility with an emphasis on the consumer experience. As a consumer of CI/CD system, you don't always want to understand the complexity but just "use" it. |
| repostats | This plugin can help find out the most popularly downlaoded artifacts in a given repository, Artifacts that are consuming the most space in a given repository with various levels of customization available. Results obtained can also be sorted and filtered. |
| rm-empty | This plugin deletes all the empty folders under a specific path in Artifactory. |
| rt-cleanup | This plugin is a simple Artifactory cleanup plugin. It can be used to delete all artifacts that have not been downloaded for the past n time units (both can be configured) from a given repository. |
| rt-fs | This plugin executes file system commands in Artifactory. It is designed to mimic the functionality of the Linux/Unix 'ls' and 'cat' commands. |
| support-bundle | This plugin allows JFrog customers to easily upload Support Bundles and files to the JFrog Support SaaS instance usinga JFrog CLI command instead of cURL. This plugin also enables the uploading of multiple files using just one command. |
| taskverse | This plugin allows developers to run JFrog Pipelines Tasks locally in their own machines. It helps with the development process by considerably reducing the feedback loop. |
We encourage you, as developers, to create plugins and share them publicly with the rest of the community. Read the JFrog CLI Plugins Developer Guide for information about developing and publishing JFrog CLI Plugins.
