attiasas
commented
1 day ago Hi @pru-qmir,
Thank you for using Frogbot!
As you can see from the log you shared:
11:29:14 [Error] audit command in '/tmp/jfrog.cli.temp.-1719588552-491394444' failed:
11:29:14 failed while building 'poetry' dependency tree:
11:29:14 "poetry install" command failed: exit status 1 - Creating virtualenv docs-loader-iPgwi-HJ-py3.11 in /opt/jenkins/.cache/pypoetry/virtualenvsYour project has been detected as using poetry. Is this the correct technology you are using? When fetching the dependencies, we execute poetry install, and this command has failed:
11:29:14 "poetry install" command failed: exit status 1 - Creating virtualenv docs-loader-iPgwi-HJ-py3.11 in /opt/jenkins/.cache/pypoetry/virtualenvsCan you execute poetry install on your project successfully?
gailazar300
pru-qmir
Describe the bug
When Frogbot Scan fails for any reason, no comment is added to PR.
Current behavior
11:28:55 11:28:55 [Info] Running Frogbot "scan-pull-request" command 11:28:55 11:28:55 [Info] Scanning Pull Request #4 (from source branch: to target branch: )
11:28:55 11:28:55 [Info] -----------------------------------------------------------
11:28:55 11:28:55 [Info] xxxxxxxxxxxxxxxx repository downloaded successfully. Starting with repository extraction...
11:28:55 11:28:55 [Info] Extracted repository successfully
11:28:55 11:28:55 [Info] Scanning source branch...
11:28:55 11:28:55 [Info] Preforming 1 SCA scans:
11:28:55 [
11:28:55 {
11:28:55 "Technology": "poetry",
11:28:55 "WorkingDirectory": "/tmp/jfrog.cli.temp.-1719588535-3386079605",
11:28:55 "Descriptors": [
11:28:55 "/tmp/jfrog.cli.temp.-1719588535-3386079605/pyproject.toml"
11:28:55 ]
11:28:55 }
11:28:55 ]
11:28:55 11:28:55 [Info] Running SCA scan for poetry vulnerable dependencies in /tmp/jfrog.cli.temp.-1719588535-3386079605 directory...
11:28:55 11:28:55 [Info] Calculating Poetry dependencies...
11:29:08 11:29:06 [Info] Scanning 57 poetry dependencies...
11:29:08 11:29:06 [Info] Waiting for scan to complete on JFrog Xray...
11:29:13 11:29:12 [Info] xxxxxxxxxxxxxxxx repository downloaded successfully. Starting with repository extraction...
11:29:13 11:29:12 [Info] Extracted repository successfully
11:29:13 11:29:12 [Info] Scanning target branch...
11:29:13 11:29:12 [Info] Preforming 1 SCA scans:
11:29:13 [
11:29:13 {
11:29:13 "Technology": "poetry",
11:29:13 "WorkingDirectory": "/tmp/jfrog.cli.temp.-1719588552-491394444",
11:29:13 "Descriptors": [
11:29:13 "/tmp/jfrog.cli.temp.-1719588552-491394444/pyproject.toml"
11:29:13 ]
11:29:13 }
11:29:13 ]
11:29:13 11:29:12 [Info] Running SCA scan for poetry vulnerable dependencies in /tmp/jfrog.cli.temp.-1719588552-491394444 directory...
11:29:13 11:29:12 [Info] Calculating Poetry dependencies...
11:29:14 11:29:14 [Error] audit command in '/tmp/jfrog.cli.temp.-1719588552-491394444' failed:
11:29:14 failed while building 'poetry' dependency tree:
11:29:14 "poetry install" command failed: exit status 1 - Creating virtualenv docs-loader-iPgwi-HJ-py3.11 in /opt/jenkins/.cache/pypoetry/virtualenvs
11:29:14 Installing dependencies from lock file
11:29:14
11:29:14 pyproject.toml changed significantly since poetry.lock was last generated. Run
poetry lock [--no-update]to fix the lock file. 11:29:1411:29:14 [Pipeline] } 11:29:14 [Pipeline] // stage 11:29:14 [Pipeline] stage 11:29:14 [Pipeline] { (Declarative: Post Actions) 11:29:14 [Pipeline] cleanWs 11:29:14 [WS-CLEANUP] Deleting project workspace... 11:29:14 [WS-CLEANUP] Deferred wipeout is used... 11:29:15 [WS-CLEANUP] done 11:29:15 [Pipeline] } 11:29:15 [Pipeline] // stage 11:29:15 [Pipeline] } 11:29:15 [Pipeline] // withEnv 11:29:15 [Pipeline] } 11:29:15 [Pipeline] // withCredentials 11:29:15 [Pipeline] } 11:29:15 [Pipeline] // withEnv 11:29:15 [Pipeline] } 11:29:15 [Pipeline] // node 11:29:15 [Pipeline] End of Pipeline 11:29:15 ERROR: script returned exit code 1 11:29:16 Posting build status of com.atlassian.bitbucket.jenkins.internal.model.BitbucketBuildStatus@86456856 to XXXXXXXXXX for commit id [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx] and ref 'refs/heads/master' 11:29:16 Finished: FAILURE
Reproduction steps
(Pull Request Scan) Env:**
Expected behavior
If pull request is created, Jfrogbot SCAN results should be added as a comment to PR whether its Successful and/or Fails
JFrog Frogbot version
Latest
Package manager info
pyproject.toml, poetry.lock
Git provider
Bitbucket Server
JFrog Frogbot configuration yaml file
No response
Operating system type and version
Linux
JFrog Xray version
Latest