-
Notifications
You must be signed in to change notification settings - Fork 46
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
GITBOOK-139: Restructure and simplify JFrog Frogbot pages - easier te…
…mplates, flow
- Loading branch information
1 parent
3bd411f
commit d4514fc
Showing
22 changed files
with
708 additions
and
146 deletions.
There are no files selected for viewing
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
jfrog-applications/frogbot/setup-frogbot-using-azure-pipelines.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
104 changes: 0 additions & 104 deletions
104
jfrog-applications/frogbot/setup-frogbot-using-github-actions.md
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
jfrog-applications/frogbot/setup-frogbot-using-jfrog-pipelines.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 2 additions & 0 deletions
2
jfrog-applications/jfrog-applications/frogbot/scan-execution/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,2 @@ | ||
# Scan Execution | ||
|
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
14 changes: 7 additions & 7 deletions
14
...itories/view-security-alerts-on-github.md → ...itories/view-security-alerts-on-github.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,29 +1,29 @@ | ||
# View Security Alerts on GitHub | ||
|
||
For GitHub repositories, issues that are found during Frogbot's periodic scans are also added to the [Security Alerts](https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/managing-code-scanning-alerts-for-your-repository) view in the UI. | ||
For GitHub repositories, issues that are found during Frogbot's repository scans are also added to the [Security Alerts](https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/managing-code-scanning-alerts-for-your-repository) view in the UI. | ||
|
||
![](../../../.gitbook/assets/github-code-scanning.png) | ||
![](../../../../.gitbook/assets/github-code-scanning.png) | ||
|
||
The following alert types are supported: | ||
|
||
**1. CVEs on vulnerable dependencies** | ||
|
||
![](../../../.gitbook/assets/github-code-scanning-content.png) | ||
![](../../../../.gitbook/assets/github-code-scanning-content.png) | ||
|
||
**2. Secrets that are exposed in the code** | ||
|
||
![](../../../.gitbook/assets/github-code-scanning-secrets-content.png) | ||
![](../../../../.gitbook/assets/github-code-scanning-secrets-content.png) | ||
|
||
**3. Infrastructure as Code (Iac) issues on Terraform packages** | ||
|
||
![](../../../.gitbook/assets/github-code-scanning-iac-content.png) | ||
![](../../../../.gitbook/assets/github-code-scanning-iac-content.png) | ||
|
||
**4. Static Application Security Testing (Sast) vulnerabilities** | ||
|
||
![](../../../.gitbook/assets/github-code-scanning-sast-content.png) | ||
![](../../../../.gitbook/assets/github-code-scanning-sast-content.png) | ||
|
||
**5. Validate Allowed Licenses** | ||
|
||
When Frogbot scans the repository periodically, it checks the licenses of any project dependencies. If Frogbot identifies licenses that are not listed in a predefined set of approved licenses, it adds an alert. The list of allowed licenses is set up as a variable within the Frogbot workflow. | ||
|
||
![](../../../.gitbook/assets/github-code-scanning-license-violation-content.png) | ||
![](../../../../.gitbook/assets/github-code-scanning-license-violation-content.png) |
Oops, something went wrong.