Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Frogbot not showing as a tool in Security -> Code Scanning #777

Open
nbaju1 opened this issue Oct 30, 2024 · 0 comments
Open

Frogbot not showing as a tool in Security -> Code Scanning #777

nbaju1 opened this issue Oct 30, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@nbaju1
Copy link

nbaju1 commented Oct 30, 2024

Describe the bug

The "Frogbot Scan Pull Request" code scanning tool does not show up in the UI after being added.

Current behavior

The action is scanning as expected without failures. Python project is being installed with poetry and scanned.

Snip from the PR which deployed the tool:
Image

Reproduction steps

Workflow being used.

name: "Frogbot Scan Pull Request"
on:
  pull_request:
    branches:
      - master
permissions:
  pull-requests: write
  contents: read
  id-token: write
  security-events: write
jobs:
  scan-pull-request:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"

      - name: Install poetry
        run: pip install poetry

      - uses: jfrog/frogbot@5d9c42c30f1169d8be4ba5510b40e75ffcbbc2a9 # v2.21.2
        env:
          JF_URL: "https://redacted.jfrog.io/"
          JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          JF_DEPS_REPO: "pypi-virtual"
        with:
          oidc-provider-name: github-provider
          oidc-audience: github-audience

Expected behavior

The tool to show up in the Security -> Code Scanning tab.

JFrog Frogbot version

2.23.1

Package manager info

poetry 1.8.4, pyproject.toml

Git provider

GitHub

JFrog Frogbot configuration yaml file

No response

Operating system type and version

Ubuntu 22.04.5

JFrog Xray version

3.106.5

@nbaju1 nbaju1 added the bug Something isn't working label Oct 30, 2024
@nbaju1 nbaju1 changed the title FrogBot not showing as a tool in Security -> Code Scanning Frogbot not showing as a tool in Security -> Code Scanning Oct 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant