Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test Fortify AST 1.3 Update #49

Closed
wants to merge 9 commits into from
Closed

Test Fortify AST 1.3 Update #49

Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
5e5b61e
Update fortify.yml with Fortify AST action v1.3
dylanbthomas Sep 27, 2024
0575964
Update fortify.yml
dylanbthomas Sep 27, 2024
2b193b8
Update fortify.yml
dylanbthomas Sep 27, 2024
ac439d6
Update fortify.yml
dylanbthomas Sep 27, 2024
7b4b54d
Update fortify.yml
dylanbthomas Sep 30, 2024
c28ef5b
Update fortify.yml
dylanbthomas Sep 30, 2024
8669c24
Update fortify.yml
dylanbthomas Sep 30, 2024
b35f9d0
Update fortify.yml
dylanbthomas Sep 30, 2024
cc3ddb6
Update fortify.yml
dylanbthomas Oct 1, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 8 additions & 3 deletions .github/workflows/fortify.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
actions: read
contents: read
security-events: write

pull-requests: write
steps:
# Check out source code
- name: Check Out Source Code
Expand All @@ -42,14 +42,19 @@ jobs:

# Perform Fortify on Demand SAST + SCA scan and import SAST results into GitHub code scanning alerts
- name: Run FoD SAST Scan
uses: fortify/github-action@v1
uses: fortify/github-action@v1.3.1
with:
sast-scan: true
env:
FOD_URL: https://ams.fortify.com
FOD_TENANT: ${{secrets.FOD_TENANT}}
FOD_USER: ${{secrets.FOD_USER}}
FOD_PASSWORD: ${{secrets.FOD_PAT}}
FOD_RELEASE: ${{ secrets.FOD_RELEASE_ID }}
#FOD_RELEASE: ${{ secrets.FOD_RELEASE_ID }}
EXTRA_PACKAGE_OPTS: -oss
DO_EXPORT: true
DO_SETUP: true
DO_JOB_SUMMARY: true
DO_PR_COMMENT: true
#DO_POLICY_CHECK: true
SETUP_EXTRA_OPTS: --sdlc-status Development --scan-types sast