Skip to content

Access to calling curl through JF CLI based on the JFrog Platform URL #2677

Closed

Description

@moegwsa

Is your feature request related to a problem? Please describe.
Currently, the JFrog CLI allows us to perform a number of tasks to maintain the JFrog Platform and the associated applications having the credentials stored away safely.

However not all services which are provided through the REST API which are also fully accessible through the JFrog CLI. This may result in credential information being leaked through build pipeline logs if the REST API's are invoked and insufficient care is given ir order to avoid presenting the information.

Examples of this are that it is possible to create new release bundles, but getting a list of existing release bundles require The REST API's to be called directly.

Describe the solution you'd like to see
I would like to be able to call the REST API from the JFrog CLI based on the JFrog Platform URL instead of being restricted to do so based on the "jf rt curl..." and the "jf xr curl..." which limit which endpoints are available.

An example of this could be:
jf curl -XPOST "/lifecycle/api/v2/promotion...

Describe alternatives you've considered
The alternatives would be to either be limited by which commands have been implemented in the JFrog CLI, or to using the JFrog REST API specifying credentials directly and hoping no credentials are leaked into the build logs.

Activity

  1. DavidRadoorHummel commented on Sep 4, 2024

    @DavidRadoorHummel

    This would be a great addition!

  2. krishnamanchikalapudi commented on Sep 5, 2024

    @krishnamanchikalapudi

    jf curl would be an invaluable addition to the JFrog CLI

  3. mgriffin13 commented on Jan 24, 2025

    @mgriffin13

    related: #2595

  4. github-actions commented on Sep 24, 2025

    @github-actions
    Contributor

    This issue has been marked as stale due to 6 months of inactivity. As part of our effort to address every issue properly, please feel free to remove the stale label or keep this issue active by leaving a comment. Otherwise, it will be closed in 7 days

  5. mgriffin13 commented on Sep 28, 2025

    @mgriffin13

    This is still pending.

  6. RemiBou commented on Oct 17, 2025

    @RemiBou
    Contributor

    We do not plan to support this. In order to make it work, create a token with the CLI and then use that token for regular curl calls.

  7. mgriffin13 commented on Oct 17, 2025

    @mgriffin13

    We do not plan to support this. In order to make it work, create a token with the CLI and then use that token for regular curl calls.

    Can you elaborate on the reason you're not going to support it? You already support the feature for jfrog rt curl and jfrog xr curl, it seems strange to limit this very useful feature to a relatively small subset of API endpoints.

  8. mgriffin13 commented on May 7, 2026

    @mgriffin13

    Just to follow up on this, it looks like JFrog added an api command in v2.100.0. Why they called it "api" instead of curl to be consistent with the already implemented curl features of jf rt curl and jf xr curl, i can't say, but the new jf api subcommand should satisfy this requirement.

    #3418

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions