Bump tough-cookie from 4.1.2 to 4.1.3 #3

	name: "Frogbot Scan Pull Request"
	on:
	pull_request_target:
	types: [opened, synchronize]
	permissions:
	pull-requests: write
	contents: read
	jobs:
	scan-pull-request:
	runs-on: ubuntu-latest
	# A pull request needs to be approved, before Frogbot scans it. Any GitHub user who is associated with the
	# "frogbot" GitHub environment can approve the pull request to be scanned.
	environment: frogbot
	steps:
	- uses: actions/checkout@v3
	with:
	ref: ${{ github.event.pull_request.head.sha }}

	# Install prerequisites
	- name: Setup NodeJS
	uses: actions/setup-node@v3
	with:
	node-version: "16.x"

	- uses: jfrog/frogbot@v2
	env:
	# [Mandatory]
	# JFrog platform URL (This functionality requires version 3.29.0 or above of Xray)
	JF_URL: ${{ secrets.FROGBOT_URL }}

	# [Mandatory if JF_USER and JF_PASSWORD are not provided]
	# JFrog access token with 'read' permissions on Xray service
	JF_ACCESS_TOKEN: ${{ secrets.FROGBOT_ACCESS_TOKEN }}

	# [Mandatory]
	# The GitHub token automatically generated for the job
	JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback