-
Notifications
You must be signed in to change notification settings - Fork 236
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Michael Sverdlov <[email protected]>
- Loading branch information
1 parent
9abc49c
commit 4f1bc20
Showing
6 changed files
with
16 additions
and
115 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -14,6 +14,7 @@ jobs: | |
steps: | ||
- uses: jfrog/frogbot@v2 | ||
env: | ||
JFROG_CLI_LOG_LEVEL: "DEBUG" | ||
# [Mandatory] | ||
# JFrog platform URL (This functionality requires version 3.29.0 or above of Xray) | ||
JF_URL: ${{ secrets.FROGBOT_URL }} | ||
|
@@ -22,14 +23,6 @@ jobs: | |
# JFrog access token with 'read' permissions on Xray service | ||
JF_ACCESS_TOKEN: ${{ secrets.FROGBOT_ACCESS_TOKEN }} | ||
|
||
# [Mandatory if JF_ACCESS_TOKEN is not provided] | ||
# JFrog username with 'read' permissions for Xray. Must be provided with JF_PASSWORD | ||
# JF_USER: ${{ secrets.JF_USER }} | ||
|
||
# [Mandatory if JF_ACCESS_TOKEN is not provided] | ||
# JFrog password. Must be provided with JF_USER | ||
# JF_PASSWORD: ${{ secrets.JF_PASSWORD }} | ||
|
||
# [Mandatory] | ||
# The GitHub token is automatically generated for the job | ||
JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
|
@@ -57,15 +50,21 @@ jobs: | |
# [Optional] | ||
# Configure the SMTP server to enable Frogbot to send emails with detected secrets in pull request scans. | ||
# SMTP server URL including should the relevant port: (Example: smtp.server.com:8080) | ||
# JF_SMTP_SERVER: "" | ||
JF_SMTP_SERVER: ${{ secrets.JF_SMTP_SERVER }} | ||
|
||
# [Mandatory if JF_SMTP_SERVER is set] | ||
# The username required for authenticating with the SMTP server. | ||
# JF_SMTP_USER: "" | ||
JF_SMTP_USER: ${{ secrets.JF_SMTP_USER }} | ||
|
||
# [Mandatory if JF_SMTP_SERVER is set] | ||
# The password associated with the username required for authentication with the SMTP server. | ||
# JF_SMTP_PASSWORD: "" | ||
JF_SMTP_PASSWORD: ${{ secrets.JF_SMTP_PASSWORD }} | ||
|
||
# [Optional] | ||
# List of comma separated email addresses to receive email notifications about secrets | ||
# detected during pull request scanning. The notification is also sent to the email set | ||
# in the committer git profile regardless of whether this variable is set or not. | ||
JF_EMAIL_RECEIVERS: "[email protected]" | ||
|
||
########################################################################## | ||
## If your project uses a 'frogbot-config.yml' file, you can define ## | ||
|
@@ -117,10 +116,4 @@ jobs: | |
# [Optional] | ||
# Set the minimum severity for vulnerabilities that should be fixed and commented on in pull requests | ||
# The following values are accepted: Low, Medium, High or Critical | ||
# JF_MIN_SEVERITY: "" | ||
|
||
# [Optional] | ||
# List of comma separated email addresses to receive email notifications about secrets | ||
# detected during pull request scanning. The notification is also sent to the email set | ||
# in the committer git profile regardless of whether this variable is set or not. | ||
# JF_EMAIL_RECEIVERS: "" | ||
# JF_MIN_SEVERITY: "" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters