Frogbot Scan repostiory to generate report
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 372
- Forks
- 107
- Avg merge
- 2d 20h
- Merged PRs (30d)
- 5
Description
Setup:
We are using gitlab premium/Jenkins for the CI.
I would like to do scan-repository using frogbot for a multi-module maven project and a monorepo with yarn workspaces(Single yarn.lock at the root and individual descriptors per app/library)
Does Frogbot support yarn workspaces yet? I see still there is an open issue.
I know that frogbot scan-repository is intended to only create PR's for the direct dependencies. Is there a way to generate a report with Frogbot(or we need to rely on CLI for that), so that we can get a overall picture including indirect/transitive dependencies.
I am looking for something like this(https://github.com/jfrog/frogbot/pull/745). Problem is we are only using Gitlab premium, so we cannot use it.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing Frogbot's scan-repository documentation and the referenced open issue about Yarn workspaces. Clarify whether workspace support and transitive-dependency reporting are requested as separate capabilities, then compare the proposed report with pull request 745. Done means the supported workflow and any required implementation scope are clearly established for GitLab Premium and Jenkins.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- gitlab
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100