From 08613bcbfdfcbb7d1f17fd4400ed8b7831f7e75f Mon Sep 17 00:00:00 2001
From: Jonathan Hardison <jmh@jonathanhardison.com>
Date: Sat, 25 Jul 2026 21:43:46 -0500
Subject: [PATCH 1/2] feat: register xray vulnreport v1.0.1

---
 README.md              | 18 +++++++++++++-----
 plugins/vulnreport.yml |  7 +++++++
 2 files changed, 20 insertions(+), 5 deletions(-)
 create mode 100644 plugins/vulnreport.yml

diff --git a/README.md b/README.md
index 73cb665..dbf19bb 100644
--- a/README.md
+++ b/README.md
@@ -7,10 +7,10 @@
 </div>
 
 ## General
-**JFrog CLI Plugins** allow enhancing the functionality of [JFrog CLI](https://www.jfrog.com/confluence/display/CLI/JFrog+CLI) to meet the specific user and organization needs. The source code of a plugin is maintained as an open source Go project on GitHub. All public plugins are registered in **JFrog CLI's Plugins Registry**. The Registry is hosted in this GitHub repository. The [plugins](plugins) directory includes a descriptor file for each plugin included in the Registry. 
+**JFrog CLI Plugins** allow enhancing the functionality of [JFrog CLI](https://www.jfrog.com/confluence/display/CLI/JFrog+CLI) to meet the specific user and organization needs. The source code of a plugin is maintained as an open source Go project on GitHub. All public plugins are registered in **JFrog CLI's Plugins Registry**. The Registry is hosted in this GitHub repository. The [plugins](plugins) directory includes a descriptor file for each plugin included in the Registry.
 
-## Installing a plugin 
-After a plugin is included in this Registry, it becomes available for installation using JFrog CLI. JFrog CLI version 1.41.1 or above is required. To install a plugin included in this registry, run the following JFrog CLI command -  `jf plugin install plugin-name`. 
+## Installing a plugin
+After a plugin is included in this Registry, it becomes available for installation using JFrog CLI. JFrog CLI version 1.41.1 or above is required. To install a plugin included in this registry, run the following JFrog CLI command -  `jf plugin install plugin-name`.
 
 ## Available plugins
 ### Security plugins
@@ -36,7 +36,7 @@ After a plugin is included in this Registry, it becomes available for installati
             <a href="https://github.com/jfrog/log4j-tools/tree/main/scan_log4j_calls_jar/jfrog_cli_plugin#readme">scan-log4j-calls-jar</a>
         </td>
         <td>
-            This plugin recursively scans all <i>.jar</i> files in a root-folder. For each jar file, the plugin prints out the locations (class name and method name) of calls to <i>info/warn/error/log/debug/trace/fatal</i> methods of <i>log4j2.Logger</i>. 
+            This plugin recursively scans all <i>.jar</i> files in a root-folder. For each jar file, the plugin prints out the locations (class name and method name) of calls to <i>info/warn/error/log/debug/trace/fatal</i> methods of <i>log4j2.Logger</i>.
         </td>
     </tr>
     <tr>
@@ -44,7 +44,7 @@ After a plugin is included in this Registry, it becomes available for installati
             <a href="https://github.com/jfrog/log4j-tools/tree/main/scan_log4j_calls_src/jfrog_cli_plugin#readme">scan-log4j-calls-src</a>
         </td>
         <td>
-            This plugin recursively scans all <i>.java</i> files in a root-folder. For each file, the plugin prints out the locations (file name and corresponding code lines) of calls to <i>log4j2</i> logging methods. 
+            This plugin recursively scans all <i>.java</i> files in a root-folder. For each file, the plugin prints out the locations (file name and corresponding code lines) of calls to <i>log4j2</i> logging methods.
         </td>
     </tr>
      <tr>
@@ -187,6 +187,14 @@ After a plugin is included in this Registry, it becomes available for installati
             This plugin allows developers to run JFrog Pipelines Tasks locally in their own machines. It helps with the development process by considerably reducing the feedback loop.
         </td>
     </tr>
+    <tr>
+        <td width="20%">
+            <a href="https://github.com/jmhardison/jfrog-vulnreport#readme">vulnreport</a>
+        </td>
+        <td>
+            This plugin allows developers to generate a local report of published image vulnerabilities. Additionally provides output formats to simplify insertion to pull-request comments in a delivery pipeline.
+        </td>
+    </tr>
 </table>
 
 ## Developing and publishing plugins
diff --git a/plugins/vulnreport.yml b/plugins/vulnreport.yml
new file mode 100644
index 0000000..ac9ba54
--- /dev/null
+++ b/plugins/vulnreport.yml
@@ -0,0 +1,7 @@
+# The vulnreport plugin
+pluginName: vulnreport
+version: v1.0.1
+repository: https://github.com/jmhardison/jfrog-vulnreport
+maintainers:
+  - jmhardison
+tag: v1.0.1
\ No newline at end of file

From bedb11b67f537df258c56e5af5a432edaa01a426 Mon Sep 17 00:00:00 2001
From: Jonathan Hardison <jmh@jonathanhardison.com>
Date: Thu, 6 Aug 2026 22:57:21 -0500
Subject: [PATCH 2/2] chore: bump vulnreport to v1.0.2

---
 plugins/vulnreport.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/vulnreport.yml b/plugins/vulnreport.yml
index ac9ba54..404dd84 100644
--- a/plugins/vulnreport.yml
+++ b/plugins/vulnreport.yml
@@ -1,7 +1,7 @@
 # The vulnreport plugin
 pluginName: vulnreport
-version: v1.0.1
+version: v1.0.2
 repository: https://github.com/jmhardison/jfrog-vulnreport
 maintainers:
   - jmhardison
-tag: v1.0.1
\ No newline at end of file
+tag: v1.0.2
\ No newline at end of file