Patrick.Sy/spring-petclinic
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-petclinic.git synced 2026-01-07 11:01:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

improving jas

Browse source
This commit is contained in:
Jesse Houldsworth 2025-09-08 12:36:50 -07:00
parent 6919cc2baf
commit 1c3a119dce
1 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

14
.github/workflows/ci-pipeline.yml vendored
View file

@ -63,14 +63,18 @@ jobs:
#################################################
# 5) SAST/SCA (on-demand audit; not tied to the build)
#################################################
#################################################
# 5) SAST/SCA (Associated with a JFrog Project)
#################################################
#################################################
# 5) SAST/SCA (Associated with an Xray Watch)
#################################################
- name: JFrog Audit (SAST & SCA)
# Add build info to associate results with the published build
# Add --fail=false so the pipeline doesn't stop here.
# Let Xray Policies and Watches determine the build status later.
# Associate the scan with one or more Xray Watches for policy enforcement.
# This is the correct method if you are not using JFrog Projects.
run: |
jf audit \
--build-name=${{ env.JFROG_CLI_BUILD_NAME }} \
--build-number=${{ env.JFROG_CLI_BUILD_NUMBER }} \
--watches=jesseh-security \
--fail=false
#################################################