Skip to content

Releases: jenkinsci/fortify-on-demand-uploader-plugin

8.0.1

10 Jul 22:48
Compare
Choose a tag to compare

Fix for ScanCentral arguments

8.0

01 Apr 17:52
Compare
Choose a tag to compare
8.0
  • Added support for DAST Automated assessments (technology preview). For freestyle projects, the Fortify on Demand Dynamic Assessment post-build action has been added. For pipelines, the fodDynamicAssessment task has been added.
  • Added support for polling for DAST Automated scan results.
  • Added dotnet as a ScanCentral Build Type value.
  • Added Exclude Files field for packaging with Fortify ScanCentral SAST.

Important:
The DAST Automated asssessment task is a technology preview. The following are known limitations:

  • Fortify on Demand Jenkins Plugin 8.0 supports up to Jenkins 2.401.x. Some UI components, including application and release fields, do not load in versions greater than 2.401.x.
  • (API scan) For some supported Jenkins versions, file and URL fields do not load.
  • (Website scan) Selection of Enable redundant page detection is not retained.
  • (Website scan) Excluded URLs are not applied in pipelines.

7.2

09 Aug 19:35
Compare
Choose a tag to compare
7.2
  • Added support for new technology stacks.
  • Added support for remote nodes.
  • Added PATH field for specifying the Fortify ScanCentral SAST client directory.
  • Upgraded libraries to resolve security vulnerabilities.

7.1.2

14 Mar 20:58
Compare
Choose a tag to compare
  • Added support for packaging files required for Debricked open source scanning with Fortify ScanCentral SAST.
  • Increased minimum required Jenkins version to 2.289

7.1.1

22 Sep 17:10
Compare
Choose a tag to compare

Added support for Jenkins Configuration as Code.
Added support for Fortify On Demand URL validation.
Fixed issue where Kotlin files were not being packaged.

7.1.0

22 Sep 15:09
Compare
Choose a tag to compare

Added support for Jenkins Configuration as Code.
Added support for Fortify On Demand URL validation.
Fixed issue where Kotlin files were not being packaged.

7.0.3

18 May 05:04
Compare
Choose a tag to compare
  • Fixed issue where a validation error occurred when using the BSI token in new freestyle projects.

7.0.2

01 Apr 05:20
Compare
Choose a tag to compare
  • Fixed issue where fields were not populating correctly in Jenkins version 2.338.

7.0.1

24 Feb 03:47
Compare
Choose a tag to compare
  • Added support for packaging Go projects with Fortify ScanCentral.
  • Removed requirement to use Fortify ScanCentral to package .NET, Java, and PHP projects.

7.0.0

21 Jan 21:34
Compare
Choose a tag to compare
  • Added new options to create or select an application and release, configure scan settings, and invoke Fortify ScanCentral SAST to package application files.
  • Added default values for the following pipeline parameters: RemediationScanPreferenceType (default RemediationScanIfAvailable), InProgressScanActionType (default DoNotStartScan), InProgressBuildResultType (default FailBuild)
  • Fixed Build result if scan in progress field to populate saved selection.
  • Fixed issue where polling status displayed Not Started for long running scans.
  • Fixed issue where saved scan settings were not populated after the Jenkins machine was restarted.