The JFrog GitHub App brings powerful automation to your GitHub setup and workflows by automatically connecting your GitHub repositories to the JFrog Platform. It enables a scalable setup, advanced vulnerability scanning for both source code and binaries, with a unified view, all within GitHub.
With centralized OIDC configuration, automated Frogbot deployment, and integration with GitHub Advanced Security (GHAS), teams can boost velocity while maintaining enterprise-grade security and compliance.

Capabilities

- Organization-Level OIDC Integration and Token Management
Provides centralized organization-level OpenID Connect (OIDC) configuration, enabling secure, consistent authentication across repositories while enforcing token configurations that comply with organizational security policies.
- Bulk Frogbot Installation for Source Code Scanning
Automate the large-scale deployment of Frogbot across multiple repositories to enable consistent source code scanning with minimal manual effort.
- JFrog Advanced Security Binary Scanning Integration
Automatically imports binary scan results from JFrog Advanced Security into GitHub Advanced Security (GHAS) for Software Composition Analysis (SCA), Secrets detection, and Infrastructure as Code (IaC) security vulnerabilities.

Benefits

- Simplified Setup
Configure security scanning and authentication once at the organizational level to avoid repetitive setup per repository.
- Time Savings
Reduce manual workload and speed up onboarding with bulk installation and automated scanning.
- Improved Security Coverage
Get comprehensive scanning of both source code and binaries, increasing detection and remediation of vulnerabilities across your projects.
- Streamlined Vulnerability Management
View all security findings directly in GitHub’s code security dashboard for easier prioritization and remediation without switching tools.
- Compliance Confidence
Ensure your security tokens and scanning configurations meet standards, reducing risk.

Getting Started

Don't have a JFrog account? Sign up: https://jfrog.com/start-free/github/