actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2420 from yahavi/bump-frogbot

Browse Source 
Frogbot: Update to 2.21.2
This commit is contained in:
Jacob Wallraff
2024-07-31 17:01:48 -07:00
committed by GitHub
parent c46165a596 aa685e127e
commit 917cb9d365
2 changed files with 8 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code-scanning/frogbot-scan-and-fix.yml
+3 -7
View File
@@ -5,9 +5,9 @@
# Frogbot Scan and Fix does the following: # Frogbot Scan and Fix does the following:
# Automatically creates pull requests with fixes for vulnerable project dependencies. # Automatically creates pull requests with fixes for vulnerable project dependencies.
# Uses JFrog Xray to scan the project. # Uses JFrog Xray to scan the project.
# Read more about Frogbot here - https://github.com/jfrog/frogbot#frogbot # Read more about Frogbot here - https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot
# Some projects require creating a frogbot-config.yml file. Read more about it here - https://github.com/jfrog/frogbot/blob/master/docs/frogbot-config.md # Some projects require creating a frogbot-config.yml file. Read more about it here - https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot/setup-frogbot/frogbot-configuration
name: "Frogbot Scan and Fix" name: "Frogbot Scan and Fix"
on: on:
@@ -23,11 +23,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
# IMPORTANT: - uses: jfrog/frogbot@5d9c42c30f1169d8be4ba5510b40e75ffcbbc2a9 # v2.21.2
# 1. See the following link for information about the tools that need to be installed for Frogbot to work - https://github.com/jfrog/frogbot/tree/master/docs/templates/github-actions/scan-and-fix
# 2. Some projects require creating a frogbot-config.yml file. Read more about it here - https://github.com/jfrog/frogbot/blob/master/docs/frogbot-config.md
- uses: jfrog/frogbot@8fbeca612957ae5f5f0c03a19cb6e59e237026f3 # v2.10.0
env: env:
# [Mandatory if the two conditions below are met] # [Mandatory if the two conditions below are met]
# 1. The project uses npm, yarn 2, NuGet or .NET to download its dependencies # 1. The project uses npm, yarn 2, NuGet or .NET to download its dependencies
code-scanning/frogbot-scan-pr.yml
+5 -9
View File
@@ -5,9 +5,9 @@
# Frogbot Scan Pull Request does the following: # Frogbot Scan Pull Request does the following:
# Automatically scans new pull requests for security vulnerabilities. # Automatically scans new pull requests for security vulnerabilities.
# Uses JFrog Xray to scan the project. # Uses JFrog Xray to scan the project.
# Read more about Frogbot here - https://github.com/jfrog/frogbot#frogbot # Read more about Frogbot here - https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot
# Some projects require creating a frogbot-config.yml file. Read more about it here - https://github.com/jfrog/frogbot/blob/master/docs/frogbot-config.md # Some projects require creating a frogbot-config.yml file. Read more about it here - https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot/setup-frogbot/frogbot-configuration
name: "Frogbot Scan Pull Request" name: "Frogbot Scan Pull Request"
on: on:
@@ -21,18 +21,14 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
# A pull request needs to be approved, before Frogbot scans it. Any GitHub user who is associated with the # A pull request needs to be approved, before Frogbot scans it. Any GitHub user who is associated with the
# "frogbot" GitHub environment can approve the pull request to be scanned. # "frogbot" GitHub environment can approve the pull request to be scanned.
# Read more here (Install Frogbot Using GitHub Actions): https://github.com/jfrog/frogbot/blob/master/docs/install-github.md # Read more here (Install Frogbot Using GitHub Actions): https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot/setup-frogbot/setup-frogbot-using-github-actions
environment: frogbot environment: frogbot
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@v4
with: with:
ref: ${{ github.event.pull_request.head.sha }} ref: ${{ github.event.pull_request.head.sha }}
# IMPORTANT: - uses: jfrog/frogbot@5d9c42c30f1169d8be4ba5510b40e75ffcbbc2a9 # v2.21.2
# 1. See the following link for information about the tools that need to be installed for Frogbot to work - https://github.com/jfrog/frogbot/tree/master/docs/templates/github-actions/scan-and-fix
# 2. Some projects require creating a frogbot-config.yml file. Read more about it here - https://github.com/jfrog/frogbot/blob/master/docs/frogbot-config.md
- uses: jfrog/frogbot@8fbeca612957ae5f5f0c03a19cb6e59e237026f3 # v2.10.0
env: env:
# [Mandatory if the two conditions below are met] # [Mandatory if the two conditions below are met]
# 1. The project uses npm, yarn 2, NuGet or .NET to download its dependencies # 1. The project uses npm, yarn 2, NuGet or .NET to download its dependencies