# Welcome to the JFrog Blog

### Latest:

[**Scanning AI Assets: Catching What SCA and SAST Might Miss**](/content/blog/scanning-ai-assets/index.html)

October 21, 2026 Or Cohen Naznin, JFrog Product Manager

8min read

Your standard application security tools are designed to protect your software pipeline by checking third-party components for known vulnerabilities (via SCA), analyzing source code for security flaws (via SAST), and scanning for accidentally exposed credentials (using secret scanners). But if a developer drops a SKILL.md file into their coding agent, installs a plugin from a…

[Read More](/content/blog/scanning-ai-assets/index.html)

## Experience   JFrog Today

### Discover how the JFrog Platform unites DevOps, DevSecOps and MLOps for secure, rapid software delivery.