Configure GitHub Integration for PR Merge Evidence

The configuration involves choosing the lifecycle stages where the PR merge evidence collection will take place.

Prerequisites

Ensure that you have the following:

• Project administrator or platform administrator permissions.
• Completed the JFrog GitHub App integration.
• JFrog Traceability GitHub Action added to your workflow.
• CI that deploys packages to Artifactory with GitHub SLSA attestations.

GitHub Integration Configuration

The integration takes place with the Administration settings.

To configure the lifecycle stages in the integration:

1. In the JFrog Platform, select the relevant project.

2. Go to Administration > AppTrust Settings > Integrations. The AppTrust Integrations page opens.

3. In the GitHub tile, click Set Up. The GitHub Integration page opens.

4. Under the Activate section, choose the lifecycle stages where PR merge evidence collection should be enabled.
5. Click Save.

What’s Next?

Learn how to View GitHub PR Merge Evidence.