Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .cursor-plugin/marketplace.json
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
},
"metadata": {
"description": "JFrog Platform plugins for Cursor",
"version": "0.5.0",
"version": "0.5.1",
"pluginRoot": "plugins"
},
"plugins": [
Expand Down
2 changes: 1 addition & 1 deletion plugins/jfrog/.cursor-plugin/plugin.json
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"name": "jfrog",
"displayName": "JFrog Platform",
"version": "0.5.0",
"version": "0.5.1",
"description": "JFrog Platform integration with MCP, security skills, supply-chain best practices, and JFrog Agent Guard governance for adding, removing, and listing MCP servers.",
"author": {
"name": "JFrog",
Expand Down
20 changes: 15 additions & 5 deletions plugins/jfrog/templates/jfrog-mcp-management.md
Original file line number Diff line number Diff line change
Expand Up @@ -165,11 +165,21 @@ Split Step 2 inputs by `isRequired`:
For each input in Step 4:

- **Secrets** (`isSecret=true`): use `${env:VAR_NAME}` in the config;
tell the user to export it via
`read -rs VAR_NAME && export VAR_NAME && echo exported`
(and add to `~/.zshrc` for persistence). They are picked up on next
launch (4a). NEVER take secrets in chat, echo them back, or
write raw values into config.
tell the user to export it for the current session via
`read -rs VAR_NAME && export VAR_NAME && echo exported`.
For persistence, the right startup file depends on the user's
**shell**, not their OS — macOS and Linux both commonly run zsh or
bash. Detect the shell (e.g. `echo "$SHELL"`) and add the export to
the file that shell loads on startup:
- **zsh** (the macOS default) → `~/.zshrc`
- **bash** → `~/.bashrc`; note macOS login shells read
`~/.bash_profile`, which usually sources `~/.bashrc`
- **fish** → `~/.config/fish/config.fish` (use `set -gx`)
- **Windows** → use `setx VAR_NAME "<value>"` (PowerShell/CMD)
instead of the `read`/`export` snippet
If unsure which file the shell sources, ask the user. Values are
picked up on next launch (4a). NEVER take secrets in chat, echo them
back, or write raw values into config.
- **Non-secrets**: literal in `env` or `${env:VAR_NAME}` — ask if
unclear.

Expand Down
Loading