Setup JFrog CLI

Stale

jfrog/setup-jfrog-cli · Apache-2.0

Set up JFrog CLI in your GitHub Actions workflow

★ 266 starsLast commit 3 months agoLatest v5.1.0

/ 100

Security signals

OpenSSF Scorecard2.6 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: jfrog/setup-jfrog-cli@deda456d982fc5e9a7a020b63eb0d2968aedd33e # v5.1.0

Mutable tags like v5.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: jfrog/setup-jfrog-cli@deda456d982fc5e9a7a020b63eb0d2968aedd33e # v5.1.0

Score breakdown

Security (35%)36

Popularity (20%)51

Maintenance (30%)68

Reliability (15%)58

Add this badge to your README

ActionRank grade badge for Setup JFrog CLI

Markdown

[![ActionRank](https://actionrank.dev/api/badge/jfrog-setup-jfrog-cli)](https://actionrank.dev/actions/jfrog-setup-jfrog-cli)

HTML version

HTML

<a href="https://actionrank.dev/actions/jfrog-setup-jfrog-cli"><img src="https://actionrank.dev/api/badge/jfrog-setup-jfrog-cli" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Setup JFrog CLI

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for Setup JFrog CLI