frogbot-scan-pull-request.yml

name: "Jfrog Registry Operator Scan Pull Request"
on:
  pull_request_target:
    types: [ opened, synchronize ]
permissions:
  pull-requests: write
  contents: read
jobs:
  scan-pull-request:
    runs-on: ubuntu-latest
    # A pull request needs to be approved before jfrog-registry-operator scans it. Any GitHub user who is associated with the
    # "jfrog-registry-operator" GitHub environment can approve the pull request to be scanned.
    environment: jfrog-registry-operator
    steps:
      - uses: jfrog/jfrog-registry-operator
        env:
          JFROG_CLI_LOG_LEVEL: "DEBUG"

          # [Mandatory if JF_USER and JF_PASSWORD are not provided]
          JF_ACCESS_TOKEN: ${{ secrets.OPERATOR_ACCESS_TOKEN }}

          # [Mandatory]
          # The GitHub token is automatically generated for the job
          JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}