orto17/JFrog Auto-Fix
Automatically creates a fix PR for a vulnerable dependency identified by JFrog
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| component_name | Dependency to fix. Maven format: "groupId:artifactId". NPM format: "packageName". | yes | — |
| affected_version | Currently installed vulnerable version | yes | — |
| fix_version | Version to upgrade to | yes | — |
| github_token | GitHub token with write access to the target repository | yes | — |
| branch_name | Branch the vulnerability was detected on. Used as the PR base. Defaults to "main". | no | main |
| commit_hash | Exact commit the scan ran against. The fix branch is created from this commit. Defaults to GITHUB_SHA. | no | — |
| log_level | Log verbosity level: DEBUG, INFO, WARN, ERROR | no | INFO |
Outputs
| name | description |
|---|---|
| pr_url | URL of the created pull request |