jartify

jartify is a small toolkit for querying a JFrog Artifactory instance from a terminal. It exposes two entry points:

Both share the same ~/.local/etc/jartify/config.yaml and $ARTIFACTORY_TOKEN env var (name is configurable).

Install

pip install jartify

Configure

Quickest: jartify-setup

jartify-setup

Prompts for URL, username, token (hidden), and default repo, then writes a managed export block to your .zshrc or .bashrc:

# >>> jartify setup >>>
export ARTIFACTORY_URL="..."
export ARTIFACTORY_USER="..."
export ARTIFACTORY_TOKEN="..."
export ARTIFACTORY_REPOSITORY="..."
# <<< jartify setup <<<

Re-running updates the block in place (no duplicates). The rc file is chmod'd to 600 since it now contains a token. Reload with source ~/.zshrc (or open a new terminal).

Alternative: config file

Env vars take precedence, but ~/.local/etc/jartify/config.yaml works too:

artifactory:
  url: https://artifactory.example.com
  repos: ""                      # optional comma-separated allowlist

authentication:
  token_env: ARTIFACTORY_TOKEN   # name of env var holding your token
  # username: your.name          # uncomment for basic auth instead of bearer

CLI usage

# Find all requests wheels and print version / filename / sha256:
jartify 'requests-*.whl'

# Restrict to specific repos:
jartify 'myapp-*.tar.gz' --repo pypi-local --repo pypi-releases

# Machine-readable output:
jartify 'myapp-*.whl' --json

Output:

VERSION  FILENAME                               SHA256
-------  -------------------------------------  ----------------------------------------------------------------
2.31.0   requests-2.31.0-py3-none-any.whl       4c491f82b8a8b4...
2.32.3   requests-2.32.3-py3-none-any.whl       70761cfe03c773...

Exit codes: 0 on at least one hit, 1 on no hits, 2 on config / auth errors.

TUI usage

jartify-tui

Keys: type pattern → Enter, r repeats the last search, y copies the highlighted row's sha256, q quits.

Releasing

One-time: register the PyPI trusted publisher

PyPI has no API for this — the form is behind your login + 2FA. The helper script opens the right page and prints the values to type:

python scripts/register-pypi-publisher.py

It reads the project name from pyproject.toml and the GitLab namespace/repo from git remote get-url origin, so there's nothing to look up. In PyPI's "Add a new pending publisher" form, pick the GitLab tab and paste the printed values.

Each release

Push to main with a bumped version in pyproject.toml. GitLab CI runs python -m build, mints a short-lived PyPI token via OIDC trusted publishing, and uploads with twine upload --skip-existing. Pushes that do not bump the version are no-ops.