Skip to content

Releases: CognitionAI/actions

Release list

v0.1.0

Choose a tag to compare

@cabralmartin cabralmartin released this 01 Jul 16:00
ffdd002
Add setup-jfrog-oidc action for JFrog Artifactory OIDC auth (#3)

* Add setup-jfrog-oidc action for JFrog Artifactory OIDC auth

Adds a new action that configures the JFrog CLI to authenticate via OIDC
token exchange using Devin-issued OIDC tokens.

Installs a jf wrapper that transparently refreshes credentials on 401 —
exchanging a fresh Devin OIDC token for a JFrog access token via
/access/api/v1/oidc/token and retrying the command.

Co-Authored-By: Zhan Xiong Chin <zhanxiong@cognition.ai>

* Fix wrapper stderr/stdout merging and graceful degradation on initial exchange failure

- Wrapper now captures stdout and stderr to separate temp files, replaying
  each to its correct fd. Prevents piped output corruption (e.g. jf rt search | jq).
- Initial token exchange uses tryRun() instead of run(), so the action
  completes even when OIDC token is not yet available (wrapper handles
  refresh at runtime).

Co-Authored-By: Zhan Xiong Chin <zhanxiong@cognition.ai>

* Fix idempotency bug and suppress token in logs

- Guard .jf-real move with commandExists('.jf-real') check to prevent
  overwriting the real binary with the wrapper on re-runs
- Use silent:true for initial token exchange to avoid leaking the
  JFrog access token in action output

Co-Authored-By: Zhan Xiong Chin <zhanxiong@cognition.ai>

---------

Co-authored-by: Staging-Devin AI <166158716+staging-devin-ai-integration[bot]@users.noreply.github.com>