Try JFrog
Guides
Contact SupportTry JFrog
  1. source-code
  2. Frogbot V2
  3. Installation
  4. GitHub Actions

Installation

Step 1: Set Up Repository Secrets

  1. Go to Settings > Secrets and variables > Actions.
  2. Add the following secrets:
Secret NameDescriptionNotes
JF_URLJFrog platform URL
JF_ACCESS_TOKENJFrog access tokenOIDC is recommended
JF_GIT_TOKENGitHub personal access tokenMust have repo and read:packages scopes
JF_USER + JF_PASSWORDJFrog user name and passwordAlternative to the JF_ACCESS_TOKEN secret

Step 2: Allow Frogbot to open Pull Requests

  1. In GitHub, navigate to the Settings tab.
  2. From the main menu, select Actions > General and check the Allow GitHub Actions to create and approve pull requests check box.

Step 3: Create an Execution Environment (Recommended for Open Source Projects Only)

  1. In GitHub, navigate to the Settings tab.
  2. From the main menu, select Environments and click on New environment.
    The Environments window opens.
  3. Create a new GitHub environment named frogbot.
  4. Add people or public teams as reviewers.
    The chosen reviewers can trigger Frogbot scans on pull requests.
  5. If the environment is required for execution, specify it in the relevant job within the CI workflow.

Step 4: Create the GitHub Actions Workflows

  1. Create the two workflow files as described in the Frogbot Workflow Templates section.
  2. Before setting up Frogbot, ensure all required tools and technologies are installed on your system and are available in your system's $PATH.