Skip to content

Conversation

@eyalk007
Copy link
Contributor

@eyalk007 eyalk007 commented Oct 28, 2025

  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.
  • Update documentation about new features / new supported technologies

@eyalk007 eyalk007 self-assigned this Oct 28, 2025
@eyalk007 eyalk007 added the improvement Automatically generated release notes label Oct 28, 2025
kerenr-jfrog and others added 2 commits November 17, 2025 12:10
* fix python descriptor file resolution

* added comment for readability
- Add workflow_dispatch trigger with version input parameter
- Validate version is v3.x.x format
- Check if tag already exists before proceeding
- Auto-generate release notes at the end
- Set make_latest=false to not mark as latest release
- Improve failure cleanup to work with both trigger types
- Create Go builder tool that builds all 10 platform binaries concurrently
- Replace sequential bash script with parallel Go implementation
- Build linux-386 first for version verification, then build remaining 9 in parallel
- Should significantly reduce build time from ~10+ minutes to ~2-3 minutes
- All builds run concurrently without worker limits for maximum speed
- Update buildAndUpload.sh to run 9 builds in parallel using & background jobs
- Build linux-386 first for version verification, then all others concurrently
- Simpler solution than Go - just ~20 lines added to existing bash script
- All builds run on same runner, no worker limits for maximum speed
- Should reduce build time from ~10-15 minutes to ~2-3 minutes
- Each build now outputs to unique filename (e.g., frogbot-linux-amd64)
- Prevents parallel builds from overwriting each other's binaries
- Upload still uses correct final name 'frogbot' at destination
- Fixes checksum mismatch errors when uploading
- Add step to download all dependencies once before parallel builds start
- Runs go mod download and go list to populate cache
- Prevents 9 parallel builds from racing to download same dependencies
- Should reduce parallel build time by avoiding redundant work
- Remove jf audit step
- Build and run Frogbot scan-repository on itself
- True dogfooding: Frogbot scanning Frogbot 🐸
- Fails if vulnerabilities found
- Replace manual go build + run with jfrog/frogbot@v2 action
- Simpler, faster, and more reliable
- Added JF_FAIL flag to fail on security issues
- Frogbot will scan and fail on issues
- Won't attempt to create automatic fix pull requests
- Replace 'jf go build' with 'go build' to remove JFrog CLI overhead
- Add cache warmup step before parallel builds
- Pre-download dependencies once
- Warm up Go build cache with initial build
- Should significantly reduce parallel build time from 6min to 2-3min
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants