mirror of
https://github.com/spring-projects/spring-petclinic.git
synced 2026-02-05 13:51:12 +00:00
Add files via upload
Signed-off-by: nirpel-sys <nirpel@jfrog.com>
This commit is contained in:
parent
d99129a9c8
commit
dd9b2f6ac3
1 changed files with 30 additions and 0 deletions
30
.github/workflows/frogbot-scan-pull-request.yaml
vendored
Normal file
30
.github/workflows/frogbot-scan-pull-request.yaml
vendored
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
name: "Frogbot Scan Pull Request"
|
||||
on:
|
||||
pull_request_target:
|
||||
types: [opened, synchronize]
|
||||
permissions:
|
||||
pull-requests: write
|
||||
contents: read
|
||||
id-token: write
|
||||
jobs:
|
||||
scan-pull-request:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: jfrog/frogbot@v2
|
||||
env:
|
||||
# [Mandatory]
|
||||
JF_URL: ${{ secrets.JF_URL }}
|
||||
|
||||
# [Mandatory]
|
||||
JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
|
||||
# [Optional] Xray Watches to apply
|
||||
JF_WATCHES: "build-watch"
|
||||
|
||||
# [Optional] Show all vulnerabilities, not just the ones introduced in the PR
|
||||
JF_INCLUDE_ALL_VULNERABILITIES: "true"
|
||||
|
||||
# [Mandatory if using OIDC authentication protocol instead of JF_ACCESS_TOKEN]
|
||||
with:
|
||||
oidc-provider-name: yanirw/CI-demo@github
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue