Automated Distribution of Open Source and Private Components with JFrog Bintray
summary
Yahoo uses JFrog Bintray to host both public Maven artifacts and private “private party” builds, with per-consumer repos, download keys and entitlements scoped to a package, and signed URLs that expire after 24 hours and one download. CI integration uses Travis CI with encrypted Bintray credentials and a Maven release flow (maven release plugin, settings.xml) to tag, build and mdeploy automatically. Also: keys are rotatable, artifacts can be pushed unpublished, and mobile app builds are typically watermarked.
AI-written summary · about
chapters (5)
- 0:00Introduction to Bintray
- 2:16Private party distribution
- 3:30Automating open source
- 8:36CI integration with Travis
- 14:44Parting thoughts and summary
related talks
29mDistributing to a public or private maven repository (en)
07mJFrog Sponsored Session - Narasimha Pai, JFrog
32mFrom Code to Trusted Release
13mCI/CD Infrastructure
01h 13mAddressing the Software Explosion
03mInterview
31mContinuous Integration and Distribution in the Cloud
44mArtifactory as an Automated Release