--- title: Extending the Single Source of Truth to the Agentic... description: JFrog announced a wave of new capabilities at swampUP 2026 aimed at extending its platform's 'Single Source of Truth' concept to cover AI agents in the... canonical: https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Extending the Single Source of Truth to the Agentic Software Supply Chain | daily.dev og:description: JFrog announced a wave of new capabilities at swampUP 2026 aimed at extending its platform's 'Single Source of Truth' concept to cover AI agents in the... og:url: https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj og:image: https://api.daily.dev/og/posts/gOCyoFWqJ.png og:image:alt: Extending the Single Source of Truth to the Agentic Software Supply Chain og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Extending the Single Source of Truth to the Agentic Software Supply Chain **[JFrog](https://daily.dev/sources/jfrog)** · 13 min read · 0 upvotes · 0 comments ## Summary JFrog announced a wave of new capabilities at swampUP 2026 aimed at extending its platform's 'Single Source of Truth' concept to cover AI agents in the software supply chain. The announcements span three pillars: Protect (governed registries, ingestion scanning, and shadow AI detection for models, MCP servers, skills, and plugins consumed by agents; native integrations with Claude, Cursor, Codex, Copilot, Kiro), Remediate (a self-healing supply chain with Zero-Touch Remediation, AutoPR, and contextual risk prioritization), and Control (DevGovOps via JFrog AppTrust, with policy-as-code, automated evidence capture, out-of-the-box compliance frameworks, and post-release monitoring). The piece frames these as responses to agents operating without human oversight, tribal knowledge, or clean audit trails, and closes with a promotional pitch for demos, trials, and the upcoming swampUP Barcelona event. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What new JFrog features govern AI coding agents like Claude, Cursor, and Copilot in the software supply chain? JFrog introduced native integrations connecting coding agents such as Claude, Cursor, Codex, Copilot, and Kiro directly to the JFrog Platform via the JFrog Agent Plugin, alongside Agent Guard for enforcing approved AI assets, Agent Package Resolution for policy-controlled dependency resolution, and a Traffic Controller integration with Netskope, Cloudflare, and Zscaler to redirect public-repo requests through JFrog. _Teams choosing how to govern AI coding agents can track platform security announcements like this on daily.dev._ ### What is JFrog Zero-Touch Remediation and how does it fix vulnerabilities automatically? Zero-Touch Remediation is a new JFrog capability that evaluates every available fix for a vulnerability already present in an environment and automatically selects and applies the best one based on policy, environment, and risk tolerance, swapping vulnerable artifacts across an entire estate without breaking dependencies or builds. _Engineers tracking faster CVE remediation workflows follow supply chain security updates like this on daily.dev._ ## Similar posts on daily.dev - [swampUP 2025 Recap: The Quantum Shift in Software Delivery Requires a Unified SSC Approach](https://daily.dev/posts/swampup-2025-recap-the-quantum-shift-in-software-delivery-requires-a-unified-ssc-approach-miu5rv49x) · JFrog · 0 upvotes · 0 comments - [swampUP 2026 Preview: The Trust Layer for the Agentic Software Supply Chain](https://daily.dev/posts/swampup-2026-preview-the-trust-layer-for-the-agentic-software-supply-chain-2lwjtrdnm) · JFrog · 0 upvotes · 0 comments - [9 New Innovations. One Trust Layer.](https://daily.dev/posts/9-new-innovations-one-trust-layer--orgvczwlu) · JFrog · 0 upvotes · 0 comments - [swampUP Europe 2025 Recap](https://daily.dev/posts/swampup-europe-2025-recap-iq0kkctdr) · JFrog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#devsecops](https://daily.dev/tags/devsecops), [#jfrog](https://daily.dev/tags/jfrog) [View this post on daily.dev](https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Extending the Single Source of Truth to the Agentic Software Supply Chain","url":"https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj"},"datePublished":"2026-09-02T14:58:27.200Z","dateModified":"2026-09-03T15:20:54.756Z","description":"JFrog announced a wave of new capabilities at swampUP 2026 aimed at extending its platform's 'Single Source of Truth' concept to cover AI agents in the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6a9b9cddd0ab96e90172226657f9e500?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6a9b9cddd0ab96e90172226657f9e500?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"JFrog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"JFrog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/b11bf37102384ac9983be701b2cf7cd5","url":"https://daily.dev/sources/jfrog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,devsecops,jfrog","timeRequired":"PT13M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"JFrog","item":"https://daily.dev/sources/jfrog"},{"@type":"ListItem","position":3,"name":"Extending the Single Source of Truth to the Agentic Software Supply Chain"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/extending-the-single-source-of-truth-to-the-agentic-software-supply-chain-gocyofwqj#faq","mainEntity":[{"@type":"Question","name":"What new JFrog features govern AI coding agents like Claude, Cursor, and Copilot in the software supply chain?","acceptedAnswer":{"@type":"Answer","text":"JFrog introduced native integrations connecting coding agents such as Claude, Cursor, Codex, Copilot, and Kiro directly to the JFrog Platform via the JFrog Agent Plugin, alongside Agent Guard for enforcing approved AI assets, Agent Package Resolution for policy-controlled dependency resolution, and a Traffic Controller integration with Netskope, Cloudflare, and Zscaler to redirect public-repo requests through JFrog. Teams choosing how to govern AI coding agents can track platform security announcements like this on daily.dev."}},{"@type":"Question","name":"What is JFrog Zero-Touch Remediation and how does it fix vulnerabilities automatically?","acceptedAnswer":{"@type":"Answer","text":"Zero-Touch Remediation is a new JFrog capability that evaluates every available fix for a vulnerability already present in an environment and automatically selects and applies the best one based on policy, environment, and risk tolerance, swapping vulnerable artifacts across an entire estate without breaking dependencies or builds. Engineers tracking faster CVE remediation workflows follow supply chain security updates like this on daily.dev."}}]} ```