JFrog · Schema

Policy

ArtifactoryCI/CDContainer RegistryDevOpsMLOpsPackage ManagementSecuritySoftware Supply Chain

Properties

Name Type Description
name string
description string
type string
rules array
View JSON Schema on GitHub

JSON Schema

jfrog-policy-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/Policy",
  "title": "Policy",
  "type": "object",
  "properties": {
    "name": {
      "type": "string"
    },
    "description": {
      "type": "string"
    },
    "type": {
      "type": "string",
      "enum": [
        "security",
        "license",
        "operational_risk"
      ]
    },
    "rules": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "priority": {
            "type": "integer"
          },
          "criteria": {
            "type": "object",
            "properties": {
              "min_severity": {
                "type": "string",
                "enum": [
                  "Low",
                  "Medium",
                  "High",
                  "Critical"
                ]
              },
              "cvss_range": {
                "type": "object",
                "properties": {
                  "from": {
                    "type": "number"
                  },
                  "to": {
                    "type": "number"
                  }
                }
              },
              "allow_unknown": {
                "type": "boolean"
              },
              "banned_licenses": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "allowed_licenses": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              }
            }
          },
          "actions": {
            "type": "object",
            "properties": {
              "webhooks": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "mails": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "block_download": {
                "type": "object",
                "properties": {
                  "unscanned": {
                    "type": "boolean"
                  },
                  "active": {
                    "type": "boolean"
                  }
                }
              },
              "block_release_bundle_distribution": {
                "type": "boolean"
              },
              "fail_build": {
                "type": "boolean"
              },
              "notify_deployer": {
                "type": "boolean"
              },
              "notify_watch_recipients": {
                "type": "boolean"
              },
              "create_ticket_enabled": {
                "type": "boolean"
              }
            }
          }
        }
      }
    }
  },
  "required": [
    "name",
    "type",
    "rules"
  ]
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/jfrog-policy"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.