Skip to content

VENDOR.md

Latest commit

 

History

History
47 lines (30 loc) · 2.19 KB

VENDOR.md

File metadata and controls

47 lines (30 loc) · 2.19 KB
Raw

Vendored skills

The skill packages under plugins/jfrog/skills/ are vendored from jfrog/jfrog-skills and committed to main.
Repository https://github.com/jfrog/jfrog-skills
Pinned release see pin in .github/scripts/sync-skills-vendor.json

Included directories: jfrog/, jfrog-ai-catalog-skills/, jfrog-package-safety-and-download/, jfrog-reference-architecture/, jfrog-setup-package-managers/ (as of the pinned release).

Refreshing

When the upstream repo publishes a new release, refresh the vendored tree via a PR that:

  1. Bumps pin in .github/scripts/sync-skills-vendor.json to the new tag.
  2. Re-syncs and commits the refreshed plugins/jfrog/skills/ tree.
  3. Bumps version in plugins/jfrog/.cursor-plugin/plugin.json so users actually receive the update (Cursor skips installs whose resolved version hasn't changed).

To regenerate the tree locally before opening the PR:

node .github/scripts/sync-skills.mjs

The script reads its sibling sync-skills-vendor.json, downloads the pinned upstream tarball from codeload.github.com, and replaces the directories listed in paths (today: skills/) under plugins/jfrog/.

Vendored modules

The plugins/jfrog/modules/ bundle is vendored from jfrog-agent-hooks (GHE) and committed to main.
Repository github.jfrog.info/JFROG/jfrog-agent-hooks
Pinned release see pin in .github/scripts/sync-modules-vendor.json

The bundle contains harness runners (core/, cursor-session-start.mjs), the package-resolution/ capability, and assets/agents-default-conf.json. Automated sync PRs (chore/sync-modules-v*) update this tree on each jfrog-agent-hooks release.

Refreshing modules

JFROG_AGENT_HOOKS_PATH=/path/to/jfrog-agent-hooks node .github/scripts/sync-modules.mjs

The script reads paths from sync-modules-vendor.json (today: ["modules"]) and replaces the whole plugins/jfrog/modules/ tree.