search

jfrog / frogbot

🐸 Scans your Git repository with JFrog Xray for security vulnerabilities. 🤖
https://docs.jfrog-applications.jfrog.io/
Apache License 2.0
305 stars 73 forks source link

Fails to scan custom python packages #667

Closed sharvesh06 closed 3 months ago

sharvesh06 commented 8 months ago

Frogbot fails when it tries to scan custom python package, 22:22:44 [Info] Xray scan completed 22:22:53 [Error] the following errors occured while fixing vulnerabilities in '/tmp/jfrog.cli.temp.-1710281552-1494864668': an error occurred while attempting to read the requirements file: open setup.py: no such file or directory We have a monorepo and JF_REQUIREMENTS_FILE is set to ""

attiasas commented 8 months ago

Hi @sharvesh06,

Thank you for using Frogbot!

How do you typically install your project? Do you have a setup.py file that lists your dependencies? If your dependencies are stored in a different file, such as requirements.txt, you'll need to provide the file name or relative path to the JF_REQUIREMENTS_FILE environment variable. This allows Frogbot to locate your project dependencies and install them accordingly.

Please feel free to reach out if you have any further questions or encounter any issues.

eranturgeman commented 5 months ago

Hello @sharvesh06 Did the answer provided above resolved your issue? Im closing the ticket, feel free to re-open it if necessary