diff --git a/.github/workflows/frogbot-scan-repository.yml b/.github/workflows/frogbot-scan-repository.yml new file mode 100644 index 0000000..c2129fc --- /dev/null +++ b/.github/workflows/frogbot-scan-repository.yml @@ -0,0 +1,30 @@ +name: "Frogbot Scan Repository" + +on: + push: + branches: + - "main" + schedule: + - cron: "6 3 * * *" + workflow_dispatch: + inputs: + branch: + description: "Branch to scan." + type: string + required: false + default: "main" + +jobs: + scan-repository: + permissions: + contents: read + pull-requests: write + security-events: write + # Required for the OIDC token exchange with the JFrog platform. + id-token: write + uses: keyshot-dev/.github/.github/workflows/frogbot-reusable.yml@main + with: + branch: ${{ inputs.branch || 'main' }} + oidc_provider_name: keyshot-dev-github + secrets: + JF_URL: ${{ secrets.JF_URL }} diff --git a/.github/workflows/frogbot.yml b/.github/workflows/frogbot.yml deleted file mode 100644 index 64c7c87..0000000 --- a/.github/workflows/frogbot.yml +++ /dev/null @@ -1,30 +0,0 @@ -name: "Frogbot Security Scan" - -on: - pull_request_target: - types: [opened, synchronize] - push: - branches: - - main - schedule: - - cron: "0 0 * * *" - workflow_dispatch: - -permissions: - pull-requests: write - contents: write - security-events: write - -jobs: - frogbot-scan: - runs-on: ubuntu-latest - strategy: - matrix: - branch: ["main"] - steps: - - uses: jfrog/frogbot@v2 - env: - JF_URL: ${{ secrets.JF_URL }} - JF_ACCESS_TOKEN: ${{ secrets.JF_ACCESS_TOKEN }} - JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }} - JF_GIT_BASE_BRANCH: ${{ matrix.branch }}