JGC-473 - Add AI-agent help text to security commands by ehl-jf · Pull Request #760 · jfrog/jfrog-cli-security

ehl-jf · 2026-05-21T14:44:15Z

Summary

Adds AI-agent-oriented help text (AIDescription) so commands render richer help when JFROG_CLI_AI_HELP is truthy or an AI agent is auto-detected. Empty AIDescription falls back to Description; human-mode output is unchanged.

Scope: 15 help.go files + 26 components.Command literals across cli/scancommands.go, cli/gitcommands.go, cli/xraycommands.go. Hidden commands intentionally included (see PR thread).

Dependency on jfrog-cli-core

jfrog-cli-core's JGC-473 PR (#1563) has MERGED. This PR's go.mod now requires the merged core master pseudo-version v2.60.1-0.20260601130310-8d52a530da18 directly — no temporary replace directive. Ready to merge on its own.

Linked

jfrog-cli-core (merged): Add AIDescription field and AI-mode help resolver jfrog-cli-core#1563
umbrella: Add AI context description to commands jfrog-cli#3503

Populate components.Command.AIDescription on commands. The new field (added in jfrog-cli-core JGC-473) makes the conversion layer render agent-oriented text when JFROG_CLI_AI_HELP is truthy or an AI agent is auto-detected. Empty AIDescription falls back to Description, so command output is unchanged in human mode. Scope: 15 help.go files + 26 components.Command literals across cli/scancommands.go, cli/gitcommands.go, cli/xraycommands.go. Hidden commands intentionally included (see PR description). Targets the dev branch. TEMPORARY go.mod pin: the require for github.com/jfrog/jfrog-cli-core/v2 points at JGC-473-devbase (commit d507b5c6) - a coordination branch that cherry-picks JGC-473 onto core's pinned commit 908527b4 (the last commit before core master removed yarn.IsVersionSupported and IsInstalledYarnVersionSupported, which downstream callers in jfrog-cli-artifactory still depend on). This require MUST be updated to the merged master commit's pseudo-version after the jfrog-cli-core JGC-473 PR merges. Do not merge this PR until the require is re-pinned.

attiasas

Looks good, please merge the PR in Core before we can merge it, also make sure to sync with dev branch

Populate components.Command.AIDescription on commands. The new field (added in jfrog-cli-core JGC-473) makes the conversion layer render agent-oriented text when JFROG_CLI_AI_HELP is truthy or an AI agent is auto-detected. Empty AIDescription falls back to Description, so command output is unchanged in human mode. Scope: 15 help.go files + 26 components.Command literals across cli/scancommands.go, cli/gitcommands.go, cli/xraycommands.go. Hidden commands intentionally included (see PR description). Targets the dev branch. TEMPORARY go.mod pin: the require for github.com/jfrog/jfrog-cli-core/v2 points at JGC-473-devbase (commit d507b5c6) - a coordination branch that cherry-picks JGC-473 onto core's pinned commit 908527b4 (the last commit before core master removed yarn.IsVersionSupported and IsInstalledYarnVersionSupported, which downstream callers in jfrog-cli-artifactory still depend on). This require MUST be updated to the merged master commit's pseudo-version after the jfrog-cli-core JGC-473 PR merges. Do not merge this PR until the require is re-pinned.

github-actions · 2026-06-03T10:47:18Z

🐸 JFrog Frogbot

…C-473-ai-context-help

attiasas

LGTM

@Phavya-jfrog

jfrog-cli 2.108.0 Created-by: HarmonybrewBot Commit-by: HarmonybrewBot Merged-by: HarmonybrewBot Description: Created by `brew bump` --- Created with `brew bump-formula-pr`.<details> <summary>release notes</summary> <pre>## What changed in v2.108.0 > Auto-generated from 6 repositories · 2026-06-11 > Comparing `v2.107.0` → `v2.108.0` > ℹ️ No changes in: gofrog ### ✨ New Features - **[build-info-go]** Added pnpm package support to recognise 403 Forbidden output [#389](jfrog/build-info-go#389) (@Phavya-jfrog) - **[jfrog-cli]** Add jf mcp command to configure the remote JFrog MCP server [#3533](jfrog/jfrog-cli#3533) (@ehl-jf) - **[jfrog-cli]** Add AI context description to commands [#3503](jfrog/jfrog-cli#3503) (@ehl-jf) - **[jfrog-cli]** feat: add server id to login command [#3394](jfrog/jfrog-cli#3394) (@tim-goto) - **[jfrog-cli]** RTECO-1021 - Enhance metrics visibility by including package manager context [#3534](jfrog/jfrog-cli#3534) (@fluxxBot) - **[jfrog-cli]** Make nix command visible [#3539](jfrog/jfrog-cli#3539) (@reshmifrog) - **[jfrog-cli]** Added Post Failure Run support for pnpm and Yarn [#3509](jfrog/jfrog-cli#3509) (@Phavya-jfrog) - **[jfrog-cli-artifactory]** JGC-473 - Add AI-agent help text to artifactory commands [#455](jfrog/jfrog-cli-artifactory#455) (@ehl-jf) - **[jfrog-cli-artifactory]** RTECO-1021 - Enhance metrics visibility by including package manager context [#481](jfrog/jfrog-cli-artifactory#481) (@fluxxBot) - **[jfrog-cli-artifactory]** RTECO-1400 - Add path validation to prevent traversal attacks in artifact handling [#487](jfrog/jfrog-cli-artifactory#487) (@fluxxBot) - **[jfrog-cli-core]** RTECO-1021 - Enhance metrics visibility by including package manager context [#1569](jfrog/jfrog-cli-core#1569) (@fluxxBot) - **[jfrog-cli-security]** Support parsing SCA issues without components [#758](jfrog/jfrog-cli-security#758) (@attiasas) - **[jfrog-cli-security]** JGC-473 - Add AI-agent help text to security commands [#760](jfrog/jfrog-cli-security#760) (@ehl-jf) - **[jfrog-cli-security]** Feature/xray 138688 add yarn support for jf ca [#759](jfrog/jfrog-cli-security#759) (@gauriy-tech) - **[jfrog-cli-security]** XRAY-144809 - CA command [Maven]: Add option to consider plugin deps [#771](jfrog/jfrog-cli-security#771) (@gauriy-tech) - **[jfrog-cli-security]** Feature/xray 138688 add pnpm support for jf ca [#769](jfrog/jfrog-cli-security#769) (@gauriy-tech) ### 🐛 Bug Fixes - **[build-info-go]** RTECO-1287 jf poetry install --only main captures all dependency [#391](jfrog/build-info-go#391) (@reshmifrog) - **[jfrog-cli]** RTECO 1296 fix repeated 401 errors before fallback authentication [#3537](jfrog/jfrog-cli#3537) (@reshmifrog) - **[jfrog-cli]** RTECO-1287 jf poetry install --only main captures all dependency [#3530](jfrog/jfrog-cli#3530) (@reshmifrog) - **[jfrog-cli-artifactory]** Updated logic for extracting repository key in case of reverse proxy scenario [#458](jfrog/jfrog-cli-artifactory#458) (@naveenku-jfrog) - **[jfrog-cli-core]** Revert "Fix reference token privilege escalation" [#1571](jfrog/jfrog-cli-core#1571) (@reshmifrog) - **[jfrog-cli-security]** XRAY-140212 - Updated gradle dep tree jar with the missing deps fix [#751](jfrog/jfrog-cli-security#751) (@gauriy-tech) - **[jfrog-cli-security]** fix: disable npm workspaces for native config reads [#762](jfrog/jfrog-cli-security#762) (@omribz156) ### 📦 Other Changes - **[build-info-go]** RTECO-1365 Include e2e tests from jfrog cli to build-info-go [#390](jfrog/build-info-go#390) (@reshmifrog) - **[jfrog-cli-artifactory]** pnpm update error output handling [#465](jfrog/jfrog-cli-artifactory#465) (@Phavya-jfrog) - **[jfrog-cli-security]** Auto install Cocoapods when Podfile.lock not exist [#723](jfrog/jfrog-cli-security#723) (@attiasas) - **[jfrog-client-go]** Use Windows system certificate store for CLI TLS transport [#1351](jfrog/jfrog-client-go#1351) (@RemiBou) --- ### 📊 Summary | Repository | Changes | |---|---| | [jfrog-cli](https://github.com/jfrog/jfrog-cli) | 8 | | [jfrog-cli-security](https://github.com/jfrog/jfrog-cli-security) | 8 | | [jfrog-cli-artifactory](https://github.com/jfrog/jfrog-cli-artifactory) | 5 | | [build-info-go](https://github.com/jfrog/build-info-go) | 3 | | [jfrog-cli-core](https://github.com/jfrog/jfrog-cli-core) | 2 | | [jfrog-client-go](https://github.com/jfrog/jfrog-client-go) | 1 | | **Total** | **27** | ### 🔗 Module Version Changes | Module | From | To | |---|---|---| | [build-info-go](https://github.com/jfrog/build-info-go) | `v1.13.1-0.20260528065004-80409c046540` | `v1.13.1-0.20260610071651-260ad6720e0d` | | [jfrog-cli-artifactory](https://github.com/jfrog/jfrog-cli-artifactory) | `v0.8.1-0.20260603105750-3886c0f01286` | `v0.8.1-0.20260610074911-82ce7d90edbd` | | [jfrog-cli-core](https://github.com/jfrog/jfrog-cli-core) | `v2.60.1-0.20260601130310-8d52a530da18` | `v2.60.1-0.20260609101026-df3091b39d06` | | [jfrog-cli-security](https://github.com/jfrog/jfrog-cli-security) | `v1.29.3` | `v1.30.0` | | [jfrog-client-go](https://github.com/jfrog/jfrog-client-go) | `v1.55.1-0.20260528115006-6ca9682a3255` | `v1.55.1-0.20260603130552-af1dd449b994` | </pre> <p>View the full release notes at <a href="https://github.com/jfrog/jfrog-cli/releases/tag/v2.108.0">https://github.com/jfrog/jfrog-cli/releases/tag/v2.108.0</a>.</p> </details> <hr> See merge request: Harmonybrew/homebrew-core!11303

ehl-jf had a problem deploying to frogbot May 21, 2026 14:44 — with GitHub Actions Failure

ehl-jf mentioned this pull request May 21, 2026

Add AI context description to commands jfrog/jfrog-cli#3503

Merged

4 tasks done

attiasas added 2 commits May 26, 2026 16:25

Merge remote-tracking branch 'upstream/dev' into JGC-473-ai-context-help

7f917fc

update deps

a2745f8

attiasas reviewed May 26, 2026

View reviewed changes

ehl-jf force-pushed the JGC-473-ai-context-help branch from 2e9680a to 262e546 Compare May 27, 2026 08:00

ehl-jf had a problem deploying to frogbot May 27, 2026 08:00 — with GitHub Actions Failure

ehl-jf mentioned this pull request Jun 1, 2026

Add AIDescription field and AI-mode help resolver jfrog/jfrog-cli-core#1563

Merged

4 tasks done

ehl-jf force-pushed the JGC-473-ai-context-help branch from 262e546 to 2bba908 Compare June 1, 2026 13:08

ehl-jf had a problem deploying to frogbot June 1, 2026 13:08 — with GitHub Actions Failure

ehl-jf force-pushed the JGC-473-ai-context-help branch from 2bba908 to eaed9de Compare June 1, 2026 13:35

ehl-jf had a problem deploying to frogbot June 1, 2026 13:35 — with GitHub Actions Failure

attiasas added improvement Automatically generated release notes safe to test Approve running integration tests on a pull request labels Jun 2, 2026

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Jun 2, 2026

attiasas added the safe to test Approve running integration tests on a pull request label Jun 2, 2026

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Jun 2, 2026

Merge branch 'dev' into JGC-473-ai-context-help

4cdae46

attiasas temporarily deployed to frogbot June 3, 2026 10:44 — with GitHub Actions Inactive

attiasas added the safe to test Approve running integration tests on a pull request label Jun 3, 2026

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Jun 3, 2026

attiasas added 3 commits June 3, 2026 14:20

Merge remote-tracking branch 'upstream/dev' into JGC-473-ai-context-help

3c58e95

update dependencies

3ba2318

Merge remote-tracking branch 'ehl-jf/JGC-473-ai-context-help' into JG…

43f8125

…C-473-ai-context-help

attiasas had a problem deploying to frogbot June 3, 2026 11:23 — with GitHub Actions Failure

attiasas added the safe to test Approve running integration tests on a pull request label Jun 3, 2026

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Jun 3, 2026

update go install

f6dd18c

attiasas had a problem deploying to frogbot June 3, 2026 11:55 — with GitHub Actions Failure

attiasas added the safe to test Approve running integration tests on a pull request label Jun 3, 2026

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Jun 3, 2026

attiasas approved these changes Jun 3, 2026

View reviewed changes

attiasas merged commit 31ea3d5 into jfrog:dev Jun 3, 2026
17 of 19 checks passed

BrewTestBot mentioned this pull request Jun 11, 2026

jfrog-cli 2.108.0 Homebrew/homebrew-core#287431

Merged

Navigation Menu

Repository navigation

JGC-473 - Add AI-agent help text to security commands - #760

JGC-473 - Add AI-agent help text to security commands#760
attiasas merged 9 commits into
jfrog:devfrom
ehl-jf:JGC-473-ai-context-help

ehl-jf commented May 21, 2026 •

edited

Loading

Uh oh!

attiasas left a comment •

edited

Loading

Uh oh!

github-actions Bot commented Jun 3, 2026

Uh oh!

attiasas left a comment

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

ehl-jf commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Dependency on jfrog-cli-core

Linked

Uh oh!

attiasas left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 3, 2026

Uh oh!

attiasas left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ehl-jf commented May 21, 2026 •

edited

Loading

attiasas left a comment •

edited

Loading