Fortify Static Code Analyzer step configuration

Ingest Fortify scan results into your pipelines.

You can ingest repository scan results from Fortify Static Code Analyzer.

Workflow description

Custom Scan step settings for Fortify scans

Scanner settings

These settings are required for most scanners. For more information, go to the reference for the scanner integration you're setting up.

• Product name

• Scan type

• Policy type

• Product config name

Product name

The scanner name. This is required for all Custom Scan steps.

Key

product_name

Value

fortify

Scan type

The target type to scan.

Key

scan_type

Value

repository

Policy type

Key

policy_type

Value

ingestionOnly

Product config name

Key

product_config_name

Value

default

Target and variant

Ingestion file

Fail on Severity