frogbot
🐸 Scans your Git repository with JFrog Xray for security vulnerabilities. 🤖
APACHE-2.0 License
Bot releases are hidden (Show)
Published by attiasas 9 days ago
What's Changed
Improvements 🌱
- Update Dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/765
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.14
Published by attiasas 25 days ago
What's Changed
Improvements 🌱
- Update Dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/757
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.13
Published by attiasas 26 days ago
What's Changed
Improvements 🌱
- Update dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/756
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.12
Published by eranturgeman about 1 month ago
What's Changed
Improvements 🌱
- Add option to skip auto fix in Frogbot scan repository by @attiasas in https://github.com/jfrog/frogbot/pull/751
Bug Fixes 🛠
- Add technology to audit params if provided by user through 'install' command by @eranturgeman in https://github.com/jfrog/frogbot/pull/749
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.11
Published by attiasas about 1 month ago
What's Changed
Improvements 🌱
- Upload result to GHAS only if JAS entitled by @attiasas in https://github.com/jfrog/frogbot/pull/747
- Use sast fingerprint when comparing source and target scan results by @orz25 in https://github.com/jfrog/frogbot/pull/748
- Update dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/750
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.10
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.9
Published by attiasas 2 months ago
What's Changed
Improvements 🌱
- Update dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/732
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.8
Published by attiasas 2 months ago
What's Changed
Bug Fixes 🛠
- Fix dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/730
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.7
Published by attiasas 2 months ago
What's Changed
Improvements 🌱
- Update Dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/729
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.6
Published by attiasas 3 months ago
What's Changed
Improvements 🌱
- Update dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/727
Bug Fixes 🛠
- Fix unmasked clone urls in DEBUG prints by @eranturgeman in https://github.com/jfrog/frogbot/pull/726
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.5
Published by attiasas 3 months ago
What's Changed
Bug Fixes 🛠
- Fix racing condition in SCA scan, assign third party deps by @attiasas in https://github.com/jfrog/jfrog-cli-security/pull/105
- Audit - fix using DepsRepo if already provided by @attiasas in https://github.com/jfrog/jfrog-cli-security/pull/107
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.4
Published by attiasas 3 months ago
What's Changed
Improvements 🌱
- Update dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/721
Bug Fixes 🛠
- Pass analytics env vars to analyzer manager by @attiasas in https://github.com/jfrog/jfrog-cli-security/pull/101
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.3
Published by attiasas 4 months ago
What's Changed
Bug Fixes 🛠
- Convert directory exclusion for JAS scanners by @attiasas in https://github.com/jfrog/jfrog-cli-security/pull/95
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.2
Published by attiasas 4 months ago
What's Changed
Improvements 🌱
- Update go version to 1.22 by @attiasas in https://github.com/jfrog/frogbot/pull/706
- Running jas scanners in parallel by @orz25 in https://github.com/jfrog/jfrog-cli-security/pull/33
- Use exclusions flag for JAS scans by @attiasas in https://github.com/jfrog/jfrog-cli-security/pull/92
- Control Pip install cmd with custom args by @attiasas in https://github.com/jfrog/jfrog-cli-security/pull/87
- Update Jfrog dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/712
Bug Fixes 🛠
- Remove duplicated footer at fallback comments by @attiasas in https://github.com/jfrog/frogbot/pull/702
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.1
Published by eranturgeman 5 months ago
What's Changed
Exciting New Features 🎉
- introducing OIDC integration by @eranturgeman in https://github.com/jfrog/frogbot/pull/696
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.21.0
Published by attiasas 6 months ago
What's Changed
Bug Fixes 🛠
- Fill xsc version field by calling xscVersion endpoint by @orz25 in https://github.com/jfrog/frogbot/pull/689
Full Changelog: https://github.com/jfrog/frogbot/compare/v2.20.1...v2.20.2
Published by eranturgeman 6 months ago
What's Changed
Improvements 🌱
- Adding error logs report to Coralogix by @eranturgeman in https://github.com/jfrog/frogbot/pull/673
- Adding analytics reports to Frogbot flows by @eranturgeman in https://github.com/jfrog/frogbot/pull/676
Bug Fixes 🛠
- Adds Severity Field for Licenses Violations for Pull Request Scans by @imranzunzani in https://github.com/jfrog/frogbot/pull/672
New Contributors
- @imranzunzani made their first contribution in https://github.com/jfrog/frogbot/pull/672
Full Changelog: https://github.com/jfrog/frogbot/compare/v2.20.0...v2.20.1
Published by attiasas 7 months ago
What's Changed
Exciting New Features 🎉
- Add Pnpm support by @eranturgeman in https://github.com/jfrog/frogbot/pull/656
Improvements 🌱
- Update Go version to 1.21 by @attiasas in https://github.com/jfrog/frogbot/pull/644
- Update dependencies by @attiasas in https://github.com/jfrog/frogbot/pull/671
Bug Fixes 🛠
- Split summary comment if exceeded max characters by @attiasas in https://github.com/jfrog/frogbot/pull/647
Full Changelog: https://github.com/jfrog/frogbot/compare/v2.19.10...v2.20.0
Published by attiasas 8 months ago
What's Changed
Improvements 🌱
- Create multi scan id before running audit command by @orz25 in https://github.com/jfrog/frogbot/pull/633
- Enable resolving vulnerable dependencies fixes from an Artifactory server for Golang projects by @eranturgeman in https://github.com/jfrog/frogbot/pull/639
Bug Fixes 🛠
- Scan fails upon empty PR push by @eranturgeman in https://github.com/jfrog/frogbot/pull/631
New Contributors
- @orz25 made their first contribution in https://github.com/jfrog/frogbot/pull/633
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.10
Published by attiasas 9 months ago
What's Changed
Bug Fixes 🛠
- Add multi_scan_id to scan params for sca scan flow by @orz25 in https://github.com/jfrog/frogbot/pull/630
Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.9
