Skip to content

Commit

Permalink
add jfrog-sast flow
Browse files Browse the repository at this point in the history
  • Loading branch information
ilya-k-1 committed Oct 21, 2024
1 parent 666350e commit 09fa3b9
Show file tree
Hide file tree
Showing 2 changed files with 69 additions and 0 deletions.
54 changes: 54 additions & 0 deletions code-scanning/jfrog-sast.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# JFrog SAST performs 1st party source code security analysis
# For more information, see
# https://docs.jfrog-applications.jfrog.io/jfrog-security-features/sast

name: "JFrog SAST Scan"

on:
push:
branches: [ $default-branch, $protected-branches ]
pull_request:
branches: [ $default-branch, $protected-branches ]
schedule:
- cron: $cron-weekly

env:
# [Mandatory]
# JFrog platform URL and access token for
# a JFrog platform instance with active
# JFrog Advanced Security subscription
JF_URL: ${{ secrets.JF_URL }}
JF_TOKEN: ${{ secrets.JF_ACCESS_TOKEN }}
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Setup Node.js
uses: actions/setup-node@v4

- name: Install and configure JFrog CLI
run: |
npm install -g jfrog-cli-v2-jf
jf c add --interactive=false --url=$JF_URL --access-token=$JF_TOKEN
- name: Run JFrog SAST
run: |
jf audit --sast --format=sarif > jfrog_sast.sarif
- name: Upload output to generate autofix
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: jfrog_sast.sarif
15 changes: 15 additions & 0 deletions code-scanning/properties/jfrog-sast.properties.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
{
"name": "JFrog SAST",
"description": "Scan for security vulnerabilities in source code using JFrog SAST",
"iconName": "frogbot",
"categories":
[
"Code Scanning",
"python",
"java",
"javascript",
"typescript",
"go"
],
"creator": "JFrog"
}

1 comment on commit 09fa3b9

@965022-oss
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

code-scanning/properties/jfrog-sast.properties.json
Merge #2559
Branch: main
965022-oss-patch2

Please sign in to comment.