I am a newbie to JFrog. As part of security testing, I was told to use JFrog to download all the jar instead of maven repository. Is it possible to auto deploy all dependencies from pom.xml to JFrog artifacts instead of uploading each jar to JFrog artifact? So that later I can point my pom repository to this JFrog atifactory where the necessary dependencies are already deployed in JFrog?
Edit: The bottom line is, no dependencies should be downloaded from internet/maven. It should be downloaded via JFrog so that I can have control over versions being used in projects. For instance,there should be only one spring framework version for all the projects. All the upload of jars should be done manually to the JFrog Repository.
Most of your dependencies are probably from external Maven repositories.
You just add these Maven repositories to the Artifactory and then build. No need to upload anything.
If you have external dependencies that do not come from a Maven repository, you need to upload them manually. But usually, the number will be small.