Skip to content

Expend vsc detection - #485

Merged
agrasth merged 35 commits into
jfrog:mainfrom
attiasas:expend_vsc_detection
Jul 2, 2026
Merged

agrasth merged 35 commits into
jfrog:mainfrom
attiasas:expend_vsc_detection

Conversation

@attiasas

@attiasas attiasas commented Jun 7, 2026 •

Copy link
Copy Markdown
Contributor
  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • All static analysis checks passed.
  • Appropriate label is added to auto generate release notes.
  • I used gofmt for formatting the code before submitting the pull request.
  • PR description is clear and concise, and it includes the proposed solution/fix.

Depends on:

Changes

  • rt upload (generic upload)
  • rt bp (buildinfo publish)
  • Conan upload, Python twine/uv, Nix copy
  • Flexpack (Gradle/Maven), npm/pnpm publish, Go publish
  • Gradle/Maven extractors

@reshmifrog reshmifrog added improvement Automatically generated release notes safe to test Approve running integration tests on a pull request labels Jun 12, 2026
… in build-info

Use GetCIVcsPropsString with cwd when dot-git-path is unset, and prefix
artifact search patterns with */ when OriginalDeploymentRepo is missing so
Gradle extractor build-info paths resolve during SetProps.

Co-authored-by: Cursor <cursoragent@cursor.com>
agrasth
agrasth previously approved these changes Jun 24, 2026
// Fallback: path-only from build-info — use wildcard repo for search-based SetProps
if artifact.Path != "" {
return artifact.Path
return "*/" + strings.TrimPrefix(artifact.Path, "/")

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When the Gradle extractor omits OriginalDeploymentRepo, the path */com/example/foo/1.0/foo.jar is used for SetItemProperties. Artifactory will match this pattern across all repos — local deployment repos, virtual repos that shadow the same path, remote repo caches, etc. This silently stamps VCS metadata on artifacts the user never intended to tag.

In practice this is mostly harmless (virtual repos are usually read-only for property writes), but if an org has a virtual repo backed by multiple locals and the same artifact was released at the same path in a different local repo, both get tagged.

We can look for a way to restrict the search to local repos only in the AQL or SetProps call when using */? If not, at minimum log a warning when the wildcard fallback is used.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

added a log and a call to get all local repositories

@agrasth
agrasth merged commit 62c27c4 into jfrog:main Jul 2, 2026
10 of 11 checks passed
social4hyq pushed a commit to social4hyq/homebrew-core that referenced this pull request Sep 20, 2026
jfrog-cli 2.113.0

Created-by: HarmonybrewBot
Commit-by: HarmonybrewBot
Merged-by: HarmonybrewBot
Description: Created by `brew bump`

---

Created with `brew bump-formula-pr`.<details>
  <summary>release notes</summary>
  <pre>## What changed in v2.113.0

> Auto-generated from 3 repositories · 2026-07-08  
> Comparing `v2.112.0` → `v2.113.0`

> ℹ️  No changes in: build-info-go, gofrog, jfrog-cli-core, jfrog-client-go

### ✨ New Features

- **[jfrog-cli]** Rteco alpine tests [#3590](jfrog/jfrog-cli#3590) (@naveenku-jfrog)

### 🐛 Bug Fixes

- **[jfrog-cli]** RTECO-945 - Fix Go version mismatch in Alpine APK CI [#3592](jfrog/jfrog-cli#3592) (@naveenku-jfrog)
- **[jfrog-cli-artifactory]** RTECO-1560 - Fix agentplugins install issue [#500](jfrog/jfrog-cli-artifactory#500) (@udaykb2)
- **[jfrog-cli-security]** XRAY-146567 - Fixed maven proxy issue [#796](jfrog/jfrog-cli-security#796) (@gauriy-tech)

### 📦 Other Changes

- **[jfrog-cli]** RTECO-1560 - Skip agentplugins tests [#3587](jfrog/jfrog-cli#3587) (@udaykb2)
- **[jfrog-cli]** Hide survey link when invoked by an AI agent [#3588](jfrog/jfrog-cli#3588) (@ehl-jf)
- **[jfrog-cli-artifactory]** Expend vsc detection [#485](jfrog/jfrog-cli-artifactory#485) (@attiasas)
- **[jfrog-cli-artifactory]** Expend vsc detection for container [#486](jfrog/jfrog-cli-artifactory#486) (@attiasas)
- **[jfrog-cli-security]** Pass os env variables to SAST server [#790](jfrog/jfrog-cli-security#790) (@ilya-k-1)
- **[jfrog-cli-security]** XRAY-145620 - Report actual module count in git audit config profile error [#793](jfrog/jfrog-cli-security#793) (@Jordanh1996)

---

### 📊 Summary

| Repository | Changes |
|---|---|
| [jfrog-cli](https://github.com/jfrog/jfrog-cli) | 4 |
| [jfrog-cli-artifactory](https://github.com/jfrog/jfrog-cli-artifactory) | 3 |
| [jfrog-cli-security](https://github.com/jfrog/jfrog-cli-security) | 3 |
| **Total** | **10** |

### 🔗 Module Version Changes

| Module | From | To |
|---|---|---|
| [jfrog-cli-artifactory](https://github.com/jfrog/jfrog-cli-artifactory) | `v0.8.1-0.20260701085637-6ba50cd3676f` | `v0.8.1-0.20260708065639-7c53c506fbcf` |
| [jfrog-cli-security](https://github.com/jfrog/jfrog-cli-security) | `v1.31.1` | `v1.31.2` |
</pre>
  <p>View the full release notes at <a href="https://github.com/jfrog/jfrog-cli/releases/tag/v2.113.0">https://github.com/jfrog/jfrog-cli/releases/tag/v2.113.0</a>.</p>
</details>
<hr>

See merge request: Harmonybrew/homebrew-core!13802

This branch had an error being deployed

1 failed deployment
frogbot — 59ed2416 Deployed Jul 1, 2026 by attiasas via scan-pull-request #1376
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants