Operations | Monitoring | ITSM | DevOps | Cloud

Protect your organization from the next software package hijacking with JFrog Curation! Learn how to create an operational risk policy in JFrog Curation that flags immature package versions. This walkthrough reviews the available operational risk conditions, explains why brand-new or outdated releases can carry supply chain risk, and shows how a Dry Run action lets you measure a policy's impact on developers before you switch it to Block.

Protect your proprietary code with JFrog Curation! Learn how to create a legal risk policy that blocks packages with licenses you don’t want developers using. In this demo, we build a policy for the GNU AGPL license, add a waiver for a package covered by a commercial license, and configure how waiver requests are handled. Read more about it in the JFrog Docs.

Learn how to configure the JFrog Curation service for the first time. This video walks through each setting on the Curation General page, including turning on Curation, connecting package types, compliant version selection and notifications, and explains what each one does. Creating Curation policies and advanced coverage are covered in separate videos. Read more about it in JFrog Docs.

Learn how to safeguard your development environment in VS Code by ensuring your agents only interact with authorized, secure MCP servers.

Learn how to safeguard your development environment in Cursor by ensuring your agents only interact with authorized, secure MCP servers.

AI agents now write, review and ship code, and our supply-chain security can't tell how that code was made. A green build and a clean scan don't tell you which model or tools the agent used, whether it had your security guidelines, or whether a human actually reviewed the change. In this talk I introduce Agentic Process Evidence, a proposed open community standard. It records the AI development process as structured, signed evidence that is attached to the commit and linked back to the full agent session logs, so release policies can enforce it automatically as policy as code.

JFrog is bringing software supply chain governance to Devin. The plugin bundles JFrog Platform Skills and registers the JFrog remote MCP server, so Devin resolves dependencies, MCP servers, and skills only from governed sources, authenticated once, with provenance preserved for every session.

JFrog is bringing software supply chain governance to AWS Kiro. Operating as a power plugin within Kiro, JFrog delivers package safety, agentic access to the JFrog platform, and the JFrog AI Catalog. With simple setup, AI agents make supply chain aware decisions right inside the IDE, ensuring dependencies come directly from Artifactory rather than unverified public registries.