JFrog CLI Evidence v0.11.0
We’re pleased to announce the release of JFrog CLI Evidence v0.11.0.
What’s new
Improved verification for federated evidence
Evidence verification can now complete successfully in federated environments when local or Artifactory public keys are not available, by using the verification result recorded at evidence creation or ingest time.
When public keys are provided (--public-keys or --use-artifactory-keys), cryptographic verification remains the primary path and is unchanged.
Highlights
More reliable jf evd verify behavior across federated topologies
Clear indication when a result is based on a recorded verification rather than a cryptographic check in the current run
Existing key-based verification workflows continue to work as before
Links
Release: https://github.com/jfrog/jfrog-cli-evidence/releases/tag/v0.11.0
Changelog: v0.10.0...v0.11.0
Thank you to everyone who contributed and reviewed this release.