From the Frog's mouth - JFrog Blog
Welcome to the JFrog Blog
Latest:
Scanning AI Assets: Catching What SCA and SAST Might Miss
October 21, 2026 Or Cohen Naznin, JFrog Product Manager
8min read
Your standard application security tools are designed to protect your software pipeline by checking third-party components for known vulnerabilities (via SCA), analyzing source code for security flaws (via SAST), and scanning for accidentally exposed credentials (using secret scanners). But if a developer drops a SKILL.md file into their coding agent, installs a plugin from a…