diff --git a/content/chainguard/libraries/java/global-configuration.md b/content/chainguard/libraries/java/global-configuration.md index 711834fceb..5f1532f209 100644 --- a/content/chainguard/libraries/java/global-configuration.md +++ b/content/chainguard/libraries/java/global-configuration.md @@ -4,7 +4,7 @@ linktitle: "Global configuration" description: "Configuring Chainguard Libraries for Java in your organization" type: "article" date: 2025-03-25T08:04:00+00:00 -lastmod: 2026-08-28T16:31:04+00:00 +lastmod: 2026-09-11T15:58:17+00:00 draft: false tags: ["Chainguard Libraries", "Java"] images: [] @@ -287,6 +287,10 @@ those protections. Since Artifactory resolves through the virtual repository in order, a misconfiguration can result in Artifactory serving an unprotected package. +### JFrog Curation and Chainguard Libraries + +{{< blurb/jfrog-curation >}} + ### Initial configuration Use the following steps to add Chainguard Libraries for Java as a remote repository: diff --git a/layouts/shortcodes/blurb/jfrog-curation.html b/layouts/shortcodes/blurb/jfrog-curation.html new file mode 100644 index 0000000000..6fb8cc44ae --- /dev/null +++ b/layouts/shortcodes/blurb/jfrog-curation.html @@ -0,0 +1,3 @@ +
Together, Chainguard Libraries and JFrog Curation support a self-healing library workflow. When JFrog identifies a vulnerable dependency, Zero-Touch Remediation can help route the application to a Chainguard-remediated version that satisfies your organization's policies, without requiring developers to change their usual Artifactory-based workflow.
+ +JFrog Catalog recognizes Chainguard-built and remediated packages before a build requests them, so you can apply Curation policies and consume Chainguard Libraries without waiting for a first-pull scan. The integration doesn't change how Chainguard serves libraries: configure Artifactory using the standard instructions, then use the resulting Artifactory repository as your Curation source.