Frogbot V3

This page lists the latest new features and enhancements for Frogbot V3.
For the:

• Complete release log, including bug fixes and other changes, see Frogbot releases on GitHub.
• Complete Frogbot documentation, see Frogbot.

3.6.0

Added GitHub Actions workflow scanning to pull request and commit scans. Frogbot analyzes the GitHub Actions workflow files in your repository source and reports misconfigurations, such as pwn-request vulnerabilities.

Added Auto-PR, which opens a GitHub pull request that fixes a vulnerability directly from an Xray scan result. In this release, Auto-PR supports binary artifact and container image scans only.

Added username and password authentication using the JF_USER and JF_PASSWORD environment variables as an alternative to a JFrog access token. For more information, see Advanced Management and Configuration.

3.4.0

Added Frogbot workspaces, which split a Git repository into named scan units, each with its own configuration profile, so a monorepo can scan and configure applications independently. Every repository includes a default workspace. Set the JF_GIT_WORKSPACE environment variable to target a specific workspace in your CI pipeline.

3.1.2

Added Frogbot scanning support for Bitbucket repositories through Bitbucket Pipelines, enabling pull request and commit security scans for Bitbucket Cloud and Bitbucket Server/Data Center.

3.1.0

Added support for publishing Frogbot SCA scan results to GitLab Vulnerability Reports during repository scans. Frogbot now generates GitLab dependency-scanning and CycloneDX SBOM reports that GitLab ingests and displays in the Security UI.