alex-gendry/Fortify SSC - SAST Scan
GitHub Action for SAST Scan Execution
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Oct 26, 2023
- License
- MIT
Pinned Snippet
uses: alex-gendry/gha-fortify-sast-scan@2f27a03c2a96df6e71453c6fbd5d6bf60f63acac # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| ssc_base_url | Fortify SSC URL | yes | — |
| ssc_ci_username | Fortify SSC CI Acount username | no | — |
| ssc_ci_password | Fortify SSC CI Acount password | no | — |
| ssc_ci_token | Fortify SSC Decrypted or Encrypted CI Token (CIToken) | no | — |
| ssc_app | Fortify SSC Application Name | yes | ${{ github.event.repository.name }} |
| ssc_version | Fortify SSC Application Version Name | yes | ${{ github.ref_name }} |
| ssc_source_app | Fortify SSC Source Application Name to Copy State from | no | — |
| ssc_source_version | Fortify SSC Source Application Version Name to Copy State from | no | — |
| ssc_source_copy_vulns | Fortify SSC Source Application Version Name to Copy State from | no | false |
| ssc_commit_customtag_guid | guid of the customtag to which push the commit sha | no | bc16a10e-1b08-4516-80a1-f0b4ff4a3e9d |
| sast_scan | Enable to run ScanCentral SAST scan | no | true |
| sast_client_auth_token | Fortify ScanCentral SAST Client authentication token | no | — |
| sast_build_options | Fortify scancentral package build options | no | -bt none |
| security_gate_action | Warn or Block on Security Gate Failure | no | warn |
| security_gate_filterset | FilterSet used for the Security Gate | no | Security Auditor View |
| summary_filterset | FilterSet used in the Job Summary | no | Security Auditor View |
| gha_token | GHA Token used to request GitHub API (Should be set to \${{ secrets.GITHUB_TOKEN }}) | no | — |
Outputs
no outputs