pass token over stdin, add security to properties

fortify · Oct 22, 2024 · 7f50c70 · 7f50c70
1 parent 09fa3b9
commit 7f50c70
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/code-scanning/jfrog-sast.yml b/code-scanning/jfrog-sast.yml
@@ -41,7 +41,7 @@ jobs:
     - name: Install and configure JFrog CLI
       run: |
         npm install -g jfrog-cli-v2-jf
-        jf c add --interactive=false --url=$JF_URL --access-token=$JF_TOKEN
+        echo $JF_TOKEN | jf c add --interactive=false --url=$JF_URL --access-token-stdin
 
     - name: Run JFrog SAST
       run: |

diff --git a/code-scanning/properties/jfrog-sast.properties.json b/code-scanning/properties/jfrog-sast.properties.json
@@ -5,6 +5,7 @@
     "categories":
     [
         "Code Scanning",
+        "security",
         "python",
         "java",
         "javascript",