Download URL of the binary your publish step put in JFrog Artifactory, e.g. https://artifactory.example.com/artifactory/mobile-releases/my-app/42/app-release.apk. Environment variables are expanded, e.g. ${ARTIFACT_URL}.

When set, the binary is not uploaded: the scanner node downloads it from Artifactory with the credential configured on the node, so Jenkins needs no Artifactory credential for this step. The URL must be under the Artifactory base and repository configured on the node, end in .apk, .aab, .xapk or .ipa, and contain no credentials.