actions-marketplace-validations/Export Fortify vulnerability data
Export Fortify vulnerability data to various targets
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| ssc_base_url | SSC Base URL (e.g. https://my.ssc.host/ssc) | no | — |
| ssc_auth_token | SSC CI authentication token | no | — |
| ssc_user | SSC user name | no | — |
| ssc_password | SSC password | no | — |
| ssc_version_id | SSC application version id from which to download SAST vulnerabilities | no | — |
| ssc_version_name | SSC <application name>:<version name> from which to download SAST vulnerabilities | no | — |
| ssc_vuln_filter_set_id | SSC filter set id from which to download SAST vulnerabilities | no | — |
| fod_base_url | FoD Base URL (e.g. https://ams.fortify.com) | no | — |
| fod_user | FoD User Name | no | — |
| fod_password | FoD Password or Access Token | no | — |
| fod_tenant | FoD Tenant | no | — |
| fod_client_id | FoD Client Id | no | — |
| fod_client_secret | FoD Client Secret | no | — |
| fod_release_id | FoD Release ID from which to download SAST vulnerabilities | no | — |
| fod_release_name | FoD <application name>:<release name> from which to download SAST vulnerabilities | no | — |
| export_target | The system/format to export to, used to determine the FortifyVulnerabilityExporter configuration file to use | no | GitHub |
| export_config | FortifyVulnerabilityExporter configuration file to use, by default determined from source system (SSC or FoD) and the `to` input parameter | no | — |
| export_dir | Directory where output files will be stored, defaults to GitHub workspace directory | no | ${GITHUB_WORKSPACE} |
Outputs
no outputs