frogbot

What's Changed

Improvements 🌱

• Improvement for recursive scan detection by @eranturgeman in https://github.com/jfrog/frogbot/pull/617
• NPM: Enable dependencies resolution from Artifactory in scan-and-fix by @eranturgeman in https://github.com/jfrog/frogbot/pull/622

Bug Fixes 🛠

• Maven - enable dependencies resolution from Artifactory server in scan-repository by @eranturgeman in https://github.com/jfrog/frogbot/pull/623

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.8

What's Changed

Improvements 🌱

• Update maven-dep-tree to v1.1.0 by @omerzi in https://github.com/jfrog/frogbot/pull/614

Other Changes 📚

• Update vulnerable dependencies by @sverdlov93 in https://github.com/jfrog/frogbot/pull/611

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.7

What's Changed

Other Changes 📚

• Upgrade jfrog-client-go, build-info-go & jfrog-cli-core by @eyalbe4 in https://github.com/jfrog/frogbot/pull/609

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.6

What's Changed

Improvements 🌱

• Scan Repository - Refactor prerequisites setting and improve debug logs by @omerzi in https://github.com/jfrog/frogbot/pull/601
• Enhance parsing of the maven-dep-tree output by @omerzi in https://github.com/jfrog/frogbot/pull/599
• Replace the "JFrog Frogbot" link in PR comments by @omerzi in https://github.com/jfrog/frogbot/pull/606
• Maven dependency update - improve non-existing version error by @sverdlov93 in https://github.com/jfrog/frogbot/pull/605

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.5

What's Changed

Improvements 🌱

• Add frogbot-config.yml content to log by @omerzi in https://github.com/jfrog/frogbot/pull/594

Bug Fixes 🛠

• Fix - scan SCA recursive only when workingDirs not provided by @attiasas in https://github.com/jfrog/jfrog-cli-core/pull/1057

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.4

What's Changed

Improvements 🌱

• Incorporate maven-dep-tree plugin by @omerzi in https://github.com/jfrog/frogbot/pull/576
• Applying auto-install modifications on a new 'fix' branch + restricting Frogbot's auto-install feature for Yarn by @eranturgeman in https://github.com/jfrog/frogbot/pull/565
• Add informative errors for the unmarshaling processes in the MavenPackageHandler by @omerzi in https://github.com/jfrog/frogbot/pull/588
• Deprecate auto-install by @eranturgeman in https://github.com/jfrog/frogbot/pull/581

Bug Fixes 🛠

• Fix false positive golangci-linter typecheck error by @eranturgeman in https://github.com/jfrog/frogbot/pull/589

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.3

What's Changed

Improvements 🌱

• Scan repository - show license violation on Github security issues by @attiasas in https://github.com/jfrog/frogbot/pull/575
• Refine gradle projects indicators by @omerzi in https://github.com/jfrog/jfrog-cli-core/pull/1027

Bug Fixes 🛠

• Fix CheckConnection race condition by @omerzi in https://github.com/jfrog/frogbot/pull/577
• Fix frogbot-config.yml unread in the scan repository commands by @omerzi in https://github.com/jfrog/frogbot/pull/578

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.2

Improvements 🌱

• Add .git to audit default exclusions by @yahavi in https://github.com/jfrog/jfrog-cli-core/pull/1022

Bug Fixes 🛠

• Xray SCA scan - always show results with location on Sarif output by @attiasas in https://github.com/jfrog/jfrog-cli-core/pull/1021
• Audit - ignore config file when needed + add releaserepo for maven by @omerzi in https://github.com/jfrog/jfrog-cli-core/pull/1024

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.1

What's Changed

Exciting New Features 🎉

• Audit SCA recursive scan by @attiasas in https://github.com/jfrog/frogbot/pull/555

Improvements 🌱

• Blocking NPM auto-install in frogbot + Passing forward install command args by @eranturgeman in https://github.com/jfrog/frogbot/pull/561
• Improve banner and content options by @attiasas in https://github.com/jfrog/frogbot/pull/560

Bug Fixes 🛠

• NPM scan repository pushes node_modules into PR fix by @eranturgeman in https://github.com/jfrog/frogbot/pull/551
• Avoid broken linked images at scan result by @attiasas in https://github.com/jfrog/frogbot/pull/567

New Contributors

• @Parsifal-M made their first contribution in https://github.com/jfrog/frogbot/pull/566

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.19.0

What's Changed

Exciting New Features 🎉

• New variable for adding pull request comment title by @omerzi in https://github.com/jfrog/frogbot/pull/556.
• New variable for skipping extra messages by @omerzi in https://github.com/jfrog/frogbot/pull/549

Bug Fixes 🛠

• Nuget multi-project support added + fixing assets files push bug by @eranturgeman in https://github.com/jfrog/frogbot/pull/525
• PR Scanning - Prevent Frogbot from failing when comment removal fails by @omerzi in https://github.com/jfrog/frogbot/pull/547

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.18.0

What's Changed

Bug Fixes 🛠

• Add licenses to aggregateScanResults by @omerzi in https://github.com/jfrog/frogbot/pull/543

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.17.1

What's Changed

Exciting New Features 🎉

• Avoid the deletion of existing PR comments by @attiasas in https://github.com/jfrog/frogbot/pull/537

Bug Fixes 🛠

• Bug fix in Gradle dependency regexp creation by @eranturgeman in https://github.com/jfrog/frogbot/pull/532

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.17.0

What's Changed

Exciting New Features 🎉

• Gradle support for scan repository by @eranturgeman in https://github.com/jfrog/frogbot/pull/478

Improvements 🌱

• Trim Git API endpoint slash suffix if exists by @sverdlov93 in https://github.com/jfrog/frogbot/pull/521
• Aggregate Fixes per branch by @EyalDelarea in https://github.com/jfrog/frogbot/pull/522

Bug Fixes 🛠

• Add error on usage when no repositories provided by @attiasas in https://github.com/jfrog/frogbot/pull/512
• Remove research details section if empty by @attiasas in https://github.com/jfrog/frogbot/pull/518
• Fix custom templates misplacement by @EyalDelarea in https://github.com/jfrog/frogbot/pull/526
• Fix advance scans markdown description by @attiasas in https://github.com/jfrog/frogbot/pull/528

Other Changes 📚

• Fix maven gav reader output issue by @sverdlov93 in https://github.com/jfrog/frogbot/pull/517

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.16.0

What's Changed

Bug Fixes 🛠

• Fix Multi Repository Scanning by @EyalDelarea in https://github.com/jfrog/frogbot/pull/510

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.15.1

What's Changed

Exciting New Features 🎉

• Pull request scanning - add license report by @omerzi in https://github.com/jfrog/frogbot/pull/498

Bug Fixes 🛠

• Fix GitLab Update Merge Request by @EyalDelarea in https://github.com/jfrog/frogbot/pull/497
• Download maven-install-plugin with JF_DEPS_REPO by @omerzi in https://github.com/jfrog/frogbot/pull/502
• Fix Custom PR Title in Aggregated Mode by @EyalDelarea in https://github.com/jfrog/frogbot/pull/496
• Enforce mandatory JF_GIT_REPO param by @EyalDelarea in https://github.com/jfrog/frogbot/pull/507

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.15.0

What's Changed

Improvements 🌱

• Show Xray ID instead of CVEs if empty in vulnerabilities description by @omerzi in https://github.com/jfrog/frogbot/pull/495

Bug Fixes 🛠

• Fix GitHub delete review comments by @omerzi in https://github.com/jfrog/frogbot/pull/494

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.14.1

What's Changed

Exciting New Features 🎉

• Introduce pull request SAST vulnerability scan by @omerzi in https://github.com/jfrog/frogbot/pull/492

Improvements 🌱

• Add CVE info to contextual Analysis comment by @attiasas in https://github.com/jfrog/frogbot/pull/491
• Pull Request - add cves to table by @omerzi in https://github.com/jfrog/frogbot/pull/490

Bug Fixes 🛠

• Mark Applicability review comment by @attiasas in https://github.com/jfrog/frogbot/pull/489

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.14.0

What's Changed

Bug Fixes 🛠

• Don't show remediation if not exists by @attiasas in https://github.com/jfrog/frogbot/pull/488

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.13.2

What's Changed

Bug Fixes 🛠

• Fix try to delete main comment at review by @attiasas in https://github.com/jfrog/frogbot/pull/487

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.13.1

What's Changed

Exciting New Features 🎉

• Create fix pull request - NuGet & .NET by @eranturgeman in https://github.com/jfrog/frogbot/pull/453
• Advanced Security comments on specific code lines when reviewing PRs by @attiasas in https://github.com/jfrog/frogbot/pull/477
• Code Review Comments API by @omerzi in https://github.com/jfrog/froggit-go/pull/117

Improvements 🌱

• Improve Audit and Scan performance for large projects by @sverdlov93 in https://github.com/jfrog/jfrog-cli-core/pull/917
• Improve audit data handling by @attiasas in https://github.com/jfrog/jfrog-cli-core/pull/936
• Improve python audit logs by @sverdlov93 in https://github.com/jfrog/jfrog-cli-core/pull/939
• Add CVE to comment dependency description title by @omerzi in https://github.com/jfrog/frogbot/pull/460
• Improve the Potential secrets detected email template by @eyalbe4 in https://github.com/jfrog/frogbot/pull/480
• Improve upload to security tab logs by @sverdlov93 in https://github.com/jfrog/frogbot/pull/481
• Add Xray Source Control Service by @EyalDelarea in https://github.com/jfrog/frogbot/pull/451
• Add CVEs to the vulnerability title in the description by @omerzi in https://github.com/jfrog/frogbot/pull/466

Other Changes 📚

• Update github.com/elazarl/goproxy dependency by @sverdlov93 in https://github.com/jfrog/frogbot/pull/479

Full Changelog: https://github.com/jfrog/frogbot/compare/v2...v2.13.0