jfrog/frogbot

View on GitHub

🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖

Stars: 372
Forks: 107
Open beginner issues: 0
Indexed issues: 104
Avg merge: 2d 20h
Merged PRs (30d): 5

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

104 open issues indexed

scan-pull-request fails on pnpm 12: 'pnpm ls --depth ""' — MaxTreeDepth never set Open

Difficulty 3/5 1-2 days Newbie friendliness 70/100

jfrog/frogbot#1422 · 1 comment · 1 reaction · Opened Sep 10, 2026
After scanning with Frogbot v3, the SAST scan results cannot be displayed in the xray-scanlist-git repository. Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#1414 · Opened Aug 24, 2026
OIDC Authentication regression Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/frogbot#1377 · 1 comment · Opened Jul 7, 2026
Frogbot.sh used creds when not needed, breaking the working Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

jfrog/frogbot#1339 · 1 comment · Opened Jun 2, 2026
[Bug] scan-repository fails with "core.repositoryformatversion does not support extension: worktreeconfig" in v2.33.0 Open

Difficulty 3/5 1-2 days Newbie friendliness 62/100

jfrog/frogbot#1333 · 1 comment · Opened May 27, 2026
How to control which Maven executable and settings file Frogbot uses for the internal dep-tree build? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/frogbot#1304 · 1 comment · Opened May 8, 2026
Update action to use node 24 Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

jfrog/frogbot#1299 · 1 reaction · Opened May 6, 2026
Secret Scanner publishes scan being ran as a secret finding to xray Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#1295 · Opened May 1, 2026
[🚨Error] multi repository configuration isn't supported. Only one repository configuration is allowed Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#1253 · Opened Mar 24, 2026
[Bug] scan-and-fix-repos: Go module dependency paths use colons instead of slashes in `go get` commands Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/frogbot#1243 · Opened Mar 16, 2026
Feature Request: Support Mixed Public and Private Registries with Secure Authentication Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/frogbot#1036 · Opened Jan 16, 2026
Enhance Frogbot To Account for Packahe Manager and/or Language Inputs Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/frogbot#1035 · Opened Jan 16, 2026
Python Requirement file choice is cached and reused incorrectly Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

jfrog/frogbot#1034 · 1 comment · Opened Jan 16, 2026
Python Pip dependency fixes only work for already-pinned dependencies Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

jfrog/frogbot#1033 · Opened Jan 16, 2026
Python Fragile cross-platform path handling Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

jfrog/frogbot#1032 · Opened Jan 16, 2026
Python Symlink escape is not prevented Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 40/100

jfrog/frogbot#1031 · Opened Jan 16, 2026
Python Incorrect directory boundary check using strings.HasPrefix Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/frogbot#1030 · Opened Jan 16, 2026
Python File handling / path bugs for /packagehandlers/pythonpackagehandler.go Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 50/100

jfrog/frogbot#1029 · Opened Jan 16, 2026
dotnet support for SLNX format Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 38/100

jfrog/frogbot#1027 · 2 comments · 4 reactions · Opened Jan 12, 2026
Frogbot Scan repostiory to generate report Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/frogbot#977 · Opened Dec 4, 2025
Add support for `uv` package manager Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/frogbot#967 · 9 reactions · Opened Nov 18, 2025
frogbot can panic when JF_ALLOW_PARTIAL_RESULTS=true Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

jfrog/frogbot#962 · Opened Nov 14, 2025
Support for cloning private fork repositories in Frogbot pull request analysis Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 35/100

jfrog/frogbot#957 · 2 reactions · Opened Nov 10, 2025
Customizing Frogbot Comments on PR Scan results Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

jfrog/frogbot#945 · Opened Nov 2, 2025
failed to run Applicability scan Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#937 · 1 comment · Opened Oct 20, 2025
frogbot&missing SBOM information Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#936 · Opened Oct 16, 2025
Example of GitLab implementation Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

jfrog/frogbot#933 · Opened Oct 8, 2025
Frogbot unable to parse large package lock Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#932 · Opened Oct 6, 2025
Frogbot support for poetry relative dependencies Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#925 · Opened Sep 15, 2025
JF_DEPS_REPO credentials configuration Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#922 · 4 comments · Opened Sep 9, 2025
Add support for bun package management Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 30/100

jfrog/frogbot#921 · Opened Sep 8, 2025
How do I configure self signed certs with frogbot Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#920 · 1 comment · Opened Sep 5, 2025
Issue running frogbot jfrog/frogbot@v2 on my gradle springboot app Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#902 · Opened Aug 15, 2025
Frogbot using wrong URL to download dependencies from private repo that are already downloaded Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#897 · 4 comments · Opened Aug 6, 2025
Scans not showing any results. Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#878 · Opened Jun 25, 2025
Support Scan on github tags Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/frogbot#868 · 2 reactions · Opened May 22, 2025
Frogbot to work with Backstage Yarn Plugin Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 38/100

jfrog/frogbot#861 · 2 comments · Opened May 8, 2025
Xray scan shows no results in Frogbot "scan-repository" output Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

jfrog/frogbot#860 · Opened May 8, 2025
Docker Support Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/frogbot#850 · Opened Apr 1, 2025
Frogbot is unable to scan multiple branches or repositories Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/frogbot#842 · 1 reaction · Opened Mar 19, 2025
Support for GitLab Components Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#835 · 2 reactions · Opened Mar 11, 2025
Is there a config to enable summary like with PRs for Repo scans in Github action based scans? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

jfrog/frogbot#825 · Opened Feb 11, 2025
Frogbot PR scan does not work with yarn using private repo Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#819 · 4 comments · Opened Jan 23, 2025
Frogbot v2.24.1 changes behaviour for repositories with multiple Python packages Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

jfrog/frogbot#817 · 7 comments · 1 reaction · Opened Jan 22, 2025
Support for npm and yarn workspaces? Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

jfrog/frogbot#798 · 7 comments · Opened Dec 12, 2024
Android - Frogbot Error Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

jfrog/frogbot#796 · 1 comment · Opened Dec 10, 2024
Syntax error in template from "Setup Frogbot Using Azure Pipelines" Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 55/100

jfrog/frogbot#794 · Opened Dec 5, 2024
Frogbot not showing as a tool in Security -> Code Scanning Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#777 · 1 comment · Opened Oct 30, 2024
Multiple technologies in one repository Open

question

Difficulty 3/5 1-2 days Newbie friendliness 30/100

jfrog/frogbot#774 · 1 comment · Opened Oct 28, 2024
Yarn Transitive Dependency Overrides Not Considered Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

jfrog/frogbot#769 · Opened Oct 16, 2024

jfrog/frogbot

Get new issues in your inbox