> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/security-testing-orchestration/3.0/use-sto/sto-scanner-configuration/fortify-scanner-reference.md).

# Fortify Static Code Analyzer step configuration

You can ingest repository scan results from [Fortify Static Code Analyzer](https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/).

### Workflow description <a href="#workflow-description" id="workflow-description"></a>

### Custom Scan step settings for Fortify scans <a href="#custom-scan-step-settings-for-fortify-scans" id="custom-scan-step-settings-for-fortify-scans"></a>

#### Scanner settings <a href="#scanner-settings" id="scanner-settings"></a>

These settings are required for most scanners. For more information, go to the reference for the scanner integration you're setting up.

* [Product name](#product-name)
* [Scan type](#scan-type)
* [Policy type](#policy-type)
* [Product config name](#product-config-name)

**Product name**

The scanner name. This is required for all Custom Scan steps.

**Key**

```
product_name
```

**Value**

```
fortify
```

**Scan type**

The target type to scan.

**Key**

```
scan_type
```

**Value**

```
repository
```

**Policy type**

**Key**

```
policy_type
```

**Value**

```
ingestionOnly
```

**Product config name**

**Key**

```
product_config_name
```

**Value**

```
default
```

#### Target and variant <a href="#target-and-variant" id="target-and-variant"></a>

#### Ingestion file <a href="#ingestion-file" id="ingestion-file"></a>

#### Fail on Severity <a href="#fail-on-severity" id="fail-on-severity"></a>