Add Fortify Application Security Testing workflow#556
Add Fortify Application Security Testing workflow#556Itsskell wants to merge 3 commits intochangesets:mainfrom
Conversation
This workflow integrates Fortify Application Security Testing into GitHub workflows, enabling SAST and SCA scans.
🦋 Changeset detectedLatest commit: 3978f6a The changes in this PR will be included in the next version bump. This PR includes changesets to release 1 package
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
There was a problem hiding this comment.
Pull request overview
This pull request adds a GitHub Actions workflow for Fortify Application Security Testing, enabling automated SAST (Static Application Security Testing) and SCA (Software Composition Analysis) scans. The workflow is triggered on pushes to main, pull requests, weekly scheduled runs, and manual dispatches.
Changes:
- Adds comprehensive Fortify AST scanning workflow with support for both Fortify on Demand and Software Security Center configurations
- Configures security-events permissions for GitHub code scanning integration
- Includes extensive configuration options for customizing scan behavior, policy checks, and reporting
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
@copilot open a new pull request to apply changes based on the comments in this thread |
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
Merge |
|
@copilot open a new pull request to apply changes based on the comments in this thread |
2 similar comments
|
@copilot open a new pull request to apply changes based on the comments in this thread |
|
@copilot open a new pull request to apply changes based on the comments in this thread |
|
@copilot open a new pull request to apply changes based on the comments in this thread |
1 similar comment
|
@copilot open a new pull request to apply changes based on the comments in this thread |
2 participants
This workflow integrates Fortify Application Security Testing into GitHub workflows, enabling SAST and SCA scans.