JFrog Docker Image Search
Use this skill to verify image tags that actually exist in Artifactory before editing CI/CD image references.
Workflow
Confirm
jfis installed and configured:jf --version jf c showPrefer the Docker registry tag API over raw artifact glob searches. Docker repositories may not expose tag directories in a way that
jf rt scan find reliably.In Codex sandboxed sessions, Artifactory hostnames commonly fail DNS resolution until the command is rerun with escalated network access. If any
jfcommand fails withlookup <host>: no such host, rerun the same JFrog query or helper command immediately with network escalation instead of retrying inside the sandbox.For exact or narrow tag checks, prefer the bundled helper first so output stays small and unambiguous:
python ~/.codex/skills/jfrog-search-docker-image/scripts/filter_docker_tags.py \ --repo public-docker-prod \ --image library/python \ --prefix 3.12 \ --contains slimList raw tags with
jf rt curlwhen the helper is not enough or broader inspection is needed:jf rt curl "/api/docker/<repo>/v2/<image-path>/tags/list"Example for Python official images mirrored in Artifactory:
jf rt curl "/api/docker/public-docker-prod/v2/library/python/tags/list"Report the exact usable image string:
<registry-host>/<repo>/<image-path>:<tag>
Notes
- If
jffails with DNS or network errors in Codex, rerun the JFrog query/helper with escalated network access and continue from that result. Do not repeat non-network setup checks such asjf --versionorjf c show. - If a broad tag-list response is large, use the helper script so only matching tags are shown.
- Use
library/pythonfor official Python images inpublic-docker-prod;pythonalone may returnNAME_UNKNOWN. - If a manifest check fails for a tag that appears in
tags/list, trusttags/listfor availability unless the user specifically asks to debug the manifest API path or headers.