Skip to content

docs(libraries): add JFrog Curation snippet to Java global config - #3985

Open
s-stumbo wants to merge 4 commits into
mainfrom
jfrog-curation
Open

s-stumbo wants to merge 4 commits into
mainfrom
jfrog-curation

Conversation

@s-stumbo

Copy link
Copy Markdown
Collaborator

Summary

Chainguard Libraries for Java now work with JFrog Curation. JFrog Catalog recognizes Chainguard-built and remediated packages before a build requests them, so teams can apply Curation policies and consume Chainguard Libraries without waiting for a first-pull scan.

This PR captures that in the docs:

  • Adds a reusable blurb snippet, layouts/shortcodes/blurb/jfrog-curation.html, describing the integration.
  • Includes it as a callout at the top of the JFrog Artifactory section of the Java global configuration guide (content/chainguard/libraries/java/global-configuration.md), before the setup steps.

Scoped to global configuration only. The JFrog subsection in build-configuration.md just redirects to global config, so a second copy would risk drift.

Test plan

  1. From the repo root, install the pinned Hugo toolchain: npm ci.
  2. Start the dev server: npm run dev.
  3. Open /chainguard/libraries/java/global-configuration/ and scroll to JFrog Artifactory.
  4. Confirm the two-paragraph JFrog Curation blurb renders directly under the section intro, above Initial configuration, with no raw {{< >}} shortcode text.
  5. Confirm both paragraphs display, including the line noting Curation support is Java-only.
  6. Run grep -rn "blurb/jfrog-curation" content/ and confirm the include appears only in the Java global configuration page.

Notes for reviewers

  • One phrase to confirm with engineering: "use the resulting Artifactory repository as your Curation source." It restates the source material and isn't otherwise verifiable in-repo — please sanity-check that Curation policies attach to the remote/virtual repo as described.
  • Follow-up: the changelog commits JavaScript and Python support "by the end of September 2026." When those ship, each ecosystem's global-configuration.md should include this snippet (with the Java-only line dropped or parameterized).

Created in collaboration with Claude Code running Claude Opus 4.8 (1M context) on 2026-09-11.

Chainguard Libraries for Java now work with JFrog Curation. Add a
reusable blurb snippet describing the integration and include it in
the JFrog Artifactory section of the Java global configuration guide.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@s-stumbo
s-stumbo requested a review from a team as a code owner September 11, 2026 13:55
@netlify

netlify Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for ornate-narwhal-088216 ready!

Name Link
🔨 Latest commit dabf91a
🔍 Latest deploy log https://app.netlify.com/projects/ornate-narwhal-088216/deploys/6aa429e93ca1f70009c83685
😎 Deploy Preview https://deploy-preview-3985--ornate-narwhal-088216.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@matthewhelmke matthewhelmke left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cool! and LGTM

Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants