Go back to the Github Installation documentation page
Use these templates to install Frogbot on your GitHub repository.
Make sure to set up 'frogbot' environment and secrets in your GitHub repository.
- Use the templates below, depending on the tool used to download dependencies for you project, to create the workflow files.
- Push the workflow files to the
.github/workflows
directory at the root of your GitHub repository.
Create a file named frogbot-scan-pull-request.yml
with the content of one of the following templates, depending on the
tool used to download the project dependencies. Make sure to follow the guidelines in the 'Using the Templates' section
above. This will allow Frogbot to scan pull requests for security vulnerabilities after the pull requests are created
and before they are merged.
Create a file named frogbot-scan-and-fix.yml
with the content of one of the following templates, depending on the tool used to download the project dependencies. Make sure to follow the guidelines in the 'Using the Templates' section above. This will make Frogbot open pull requests with fixes for security vulnerabilities found in the GitHub repository.