frogbot scan pull request issue in Azure devops
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 372
- Forks
- 107
- Avg merge
- 2d 20h
- Merged PRs (30d)
- 5
Description
Describe the bug
Iam trying to scan the PR for specific branch in azure devops Iam using following commands
curl -fLg "https://releases.jfrog.io/artifactory/frogbot/v2/[RELEASE]/getFrogbot.sh" | sh
echo $(Build.SourceBranch)
./frogbot scan-pull-requests $(Build.SourceBranch)
This is trying to scan all the active PR's in specific Repo , How to restrict it to scan only the specific branch just by passing some parameters.
Also about frogbot there is only limited details are available in documentation.Iam expecting some more indepth of information
Current behavior
It is scanning all the active PR's I want it to restrict only for specific source branch
Reproduction steps
No response
Expected behavior
No response
JFrog Frogbot version
2.12.0
Package manager info
Docker
Git provider
Azure DevOps
JFrog Frogbot configuration yaml file
steps:
- task: CmdLine@2
condition: eq(variables['Build.Reason'], 'PullRequest')
displayName: 'Download and Run Frogbot'
env:
JF_GIT_PROJECT: $(System.TeamProject)
JF_GIT_API_ENDPOINT: $(System.CollectionUri)
JF_GIT_TOKEN:
JF_URL:
JF_ACCESS_TOKEN:
JF_CLI_LOG_LEVEL: "DEBUG"
JF_GIT_OWNER: ""
JF_GIT_REPO: "
JF_GIT_PROVIDER: "azureRepos"
JF_INCLUDE_ALL_VULNERABILITIES: "TRUE"
JF_WORKING_DIR: ../../../$(system.DefaultWorkingDirectory)/
inputs:
script: |
curl -fLg "https://releases.jfrog.io/artifactory/frogbot/v2/[RELEASE]/getFrogbot.sh" | sh
echo $(Build.SourceBranch)
./frogbot scan-pull-requests $(Build.SourceBranch)
#./frogbot scan-and-fix-repos $(Build.SourceBranch)
Operating system type and version
Linux
JFrog Xray version
3.25
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the frogbot scan-pull-requests $(Build.SourceBranch) entry point and the Azure DevOps configuration shown in the issue. Check how branch selection is handled and review the existing Frogbot documentation for supported parameters. Done means the requested source branch can be restricted as intended and the relevant behavior is documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, docker, go
- Domain
- devops, documentation, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100