Anthropic Helps JFrog Govern the Software Supply Chain

Anthropic has launched a partnership with software supply chain solutions company JFrog.

The companies on Wednesday (June 10) announced the JFrog Platform plugin for users of Anthropic’s Claude Code tool, designed to bring “enterprise-grade software supply chain governance” to the fast-growing artificial intelligence (AI) coding agent platform.

“AI agents are active participants in the software supply chain, making decisions about dependencies, builds, and deployments – but most of them are doing it blind, without any supply chain context,” said Yoav Landman, JFrog’s co-founder and chief technology officer. “This is often how malicious packages, vulnerabilities, and ungoverned AI assets enter production today, exposing organizations to software supply chain attacks.”

“AI-enabled innovation cannot come at the expense of security or compliance. Enterprises need a universal system of record with real-time control and visibility into the decisions these agents make, that’s what this integration enables,” Landman added.

According to a news release, the new plugin is designed to help companies “tame unorthodox AI agent behavior” by giving developers governed access to scan, curate, and secure “every artifact and dependency their agents consume.”

The offering “also extends Claude Code with deep, domain-specific JFrog Platform Skills, designed to give developers and their agents the ability to execute platform operations using natural language,” the release added.

Advertisement: Scroll to Continue

In other Claude news, Anthropic this week debuted two Mythos-class models after developing safeguards to keep them from being misused.

As covered here, Claude Fable 5 is safe for general use, while Claude Mythos 5 will initially be limited to only a small group of cyber defenders and infrastructure providers through Anthropic’s Project Glasswing cybersecurity program.

PYMNTS wrote earlier this year about the role of AI in the physical…

Source