Popular Tags

  • FOD-Azure Devops JAVA Error.

    Good day to everybody, I have a problem running a Fortify On Demand pipneline in Azure Devops. It is the IWA-JAVA application for DEMO. The error in question is the following " Error: LinkageError occurred while loading main class com.fortify.scancentral…

  • Fortify On Demand SAST - Microservices integration with Git Actions

    I have a FOD account. I have created an application and under that I have 6 Microservices that are to be scanned. Normal FOD scan no issues, I go to the Application then scan the required Microservice. If i need to integrate the same in GitHub actions…

  • Issue with Fortify SCA and Gradle: compileDebugKotlin Error

    Hello, I am facing an issue when using Fortify Static Code Analyzer (SCA) with a Gradle project. Below are the steps I followed and the error encountered: Steps Taken: Running Gradle without Fortify: ./gradlew build Output: …

  • Eclipse Error

    Hello, I have downloaded the Fortify plugins on Eclipse, and they installed successfully, but when I ran any one of them, nothing was happening. I mean, there was no sign on Eclipse showing that the scan was running. And I have that error.

  • How do I exclude unit tests from SAST scan?

    Hi guys, any of you guys successfully excluded unit test components from scan? How do you do it? My yml file right now have something like this for files exclusions: - '-scanExclusion "fortify-scripts,*spec.ts" for folder of "fortify-scripts" I…

  • Fcli unable to create sc-sast session

    Hello, i'm trying to integrate Fortify SSC into my gitlab pipeline but i didn't work for me. this is my pipeline script : fortify-sast-scancentral : image : fortifydocker/fortify-ci-tools:latest variables : SC_SAST_SENSOR_VERSION : '23.1'…

  • SSC 23.1 Unable to locate source file rendering information. Completion of an SCA scan using the latest version of sourceanalyzer is required to view source files

    Issue is (Unable to locate source file rendering information. Completion of an SCA scan using the latest version of sourceanalyzer is required to view source files.) getting error in SSC

  • Is there a way for GitLab Runners to use Fortify CI/CD tools to stop a build based on retrieved SCA audit results ?

    Hello All, I have been working on my first integration between Fortify SAST Integration with GitLab. I have been able to successfully implement a rather simple GitLab build pipeline that performs SCA before deploying the application. Is there a feature…

  • Fortify CLI error

    Hi, I am encountering a problem with the fcli command that I am running. I am trying to start a scan and attach it to an application: + /opt/Fortify/fcli/bin/fcli sc-sast scan start --appversion 3 -p packageWebgoat --sensor-version 22.2.0.0130…

  • Fortify Scatic Code Analyzer and Flutter

    When will fortify support flutter language is there any update on this or in a future release? https://flutter.dev/

  • Jenkins pipeline for remote translation, analysis, and uploading to SSC.

    I need help with setting up my pipeline correctly. I dont have much experience with jenkins and have learnt it on the fly when configuring SCA with Jenkins. Im building the code on my Jenkins controller (Host1) and then translating and scanning it on…

  • Fortify ScanCentral SAST task for Python Project in Azure DevOps CI/CD Pipeline

    I'm having a hard time finding the equivalent of the -python-path argument in YAML pipeline syntax. Basically, i'm running a SAST Scan through my pipeline using the "Fortify ScanCentral SAST Assessment" task and its built-in fields. This task runs successfully…

  • SAST - Scanning Several Microservices

    Hello, I'm looking for suggestions on the best, most efficient way to scan a large number of a microservices at one time. We had a situation where about sixteen microservices applications where sent to our InfoSec team for static code scanning. Each application…

  • Old SAST sensors still listed

    Yesterday we upgraded our Fortify environment to 21.1.2. Everything is working just fine. We have two SAST sensors, that we of course also upgraded. However, the ScanCentral Sensors tab in the SSC now lists four sensors, because it still shows entries…

  • ScanCentral SAST and GitLab integration

    Hello, I'm trying to integrate GitLab with ScanCentral SAST. If the property allow_insecure_clients_with_empty_token is set to true and client_auth_token is empty it works but if I try to set a plain text password I get the following error: Authentication…

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.