Skip to content

Build(deps): Bump github/codeql-action from 3.24.6 to 3.24.8 #125

Build(deps): Bump github/codeql-action from 3.24.6 to 3.24.8

Build(deps): Bump github/codeql-action from 3.24.6 to 3.24.8 #125

Workflow file for this run

name: Frogbot
on:
pull_request_target:
types: [opened, synchronize]
permissions:
pull-requests: write
contents: read
jobs:
scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha }}
- name: Set up JFrog
uses: jfrog/setup-jfrog-cli@d82fe26823e1f25529250895d5673f65b02af085 # v4.0.1
env:
JF_ENV_1: ${{ secrets.ARTIFACTORY_DEPLOYER }}
- name: Run XRay scan
uses: jfrog/frogbot@ba42e26db24cec85bd14e096dfc2e01fb85ac29f # v2.19.10
env:
JF_URL: https://beyondtrust.jfrog.io
JF_ACCESS_TOKEN: ${{ secrets.ARTIFACTORY_FROGBOT_TOKEN }}
JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}