build(jfrog): add xray scan

.github/workflows/frogbot-scan-pull-request.yml

@@ -0,0 +1,27 @@
+name: "Frogbot Scan Pull Request"
+on:
+  push:
+  workflow_dispatch:
+permissions:
+  pull-requests: write
+  security-events: write
+  contents: read
+jobs:
+  scan-pull-request:
+    runs-on: ubuntu-latest
+    # A pull request needs to be approved before Frogbot scans it. Any GitHub user who is associated with the
+    # "frogbot" GitHub environment can approve the pull request to be scanned.
+    # environment: frogbot
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - uses: jfrog/frogbot@v2
+        env:
+          JF_URL: ${{ secrets.JF_URL }}
+          JF_ACCESS_TOKEN: ${{ secrets.JF_ACCESS_TOKEN }}
+          JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          JF_PATH_EXCLUSIONS: "*git*;*node_modules*;*target*;*venv*;*test*;*karma*;*dist*;*lib*"
+          JF_MIN_SEVERITY: "Medium"
+          JF_ALLOWED_LICENSES: "Apache-2.0"
+          # JF_AVOID_EXTRA_MESSAGES: "TRUE"
+          # JF_PR_COMMENT_TITLE: ""

.github/workflows/frogbot-scan-repository.yml

@@ -0,0 +1,35 @@
+name: "Frogbot Scan Repository"
+on:
+  workflow_dispatch:
+  schedule:
+    # The repository will be scanned once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
+permissions:
+  contents: write
+  pull-requests: write
+  security-events: write
+jobs:
+  scan-repository:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        # The repository scanning will be triggered periodically on the following branches.
+        branch: ["master"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - uses: jfrog/frogbot@v2
+        env:
+          JF_URL: ${{ secrets.JF_URL }}
+          JF_ACCESS_TOKEN: ${{ secrets.JF_ACCESS_TOKEN }}
+          JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          JF_GIT_BASE_BRANCH: ${{ matrix.branch }}
+          JF_PATH_EXCLUSIONS: "*git*;*node_modules*;*target*;*venv*;*test*;*karma*;*dist*;*lib*"
+          JF_MIN_SEVERITY: "Medium"
+          JF_GIT_EMAIL_AUTHOR: "[email protected]"
+          JF_ALLOWED_LICENSES: "MIT, Apache-2.0"
+          # JF_BRANCH_NAME_TEMPLATE: "frogbot-{IMPACTED_PACKAGE}-{BRANCH_NAME_HASH}"
+          # JF_COMMIT_MESSAGE_TEMPLATE: "Upgrade {IMPACTED_PACKAGE} to {FIX_VERSION}"
+          # JF_PULL_REQUEST_TITLE_TEMPLATE: "[🐸 Frogbot] Upgrade {IMPACTED_PACKAGE} to {FIX_VERSION}"
+          # JF_AVOID_EXTRA_MESSAGES: "TRUE"
+          # JF_PR_COMMENT_TITLE: ""