[Jordanh1996]

Background

CI runs on GitHub's shared runners download every Maven and Gradle dependency straight from Maven Central, which rate-limits those runners and fails builds.

Description

On runs inside the jfrog org, install-and-setup now gets a short-lived read-only token via GitHub OIDC (github-oss-ci provider) and runs jf setup maven|gradle --repo oss-maven-virtual, so downloads go through a JFrog mirror of Central and the other public repos the builds use. Fork PRs skip both steps and keep resolving from Central. (Curation and resolution tests are unaffected: they pass their own settings.xml/init script, which take precedence.)

Tests

• The pull request is targeting the dev branch.
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.

---

🤖 Generated with Claude Code

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true