Orchestrate Fortify on Demand workflows for apps, releases, scans, and audits.
npx skills add https://github.com/fortify/skills --skill fortify-fod
Please help me install this Agent Skill. Skill: fortify-fod Source: https://github.com/fortify/skills/tree/main/skills/fortify-fod Command: npx skills add https://github.com/fortify/skills --skill fortify-fod
Fortify on Demand (FoD) workflow complexity and audit overhead are reduced by orchestrating apps, releases, scans, and audit activities through a unified skill that leverages fcli commands.
List FoD releases for an app using fcli fod release list --app <name> -o json.
High-intent search queries and answers about installing and using this skill.
Automate Fortify on Demand scans in a CI/CD pipeline by orchestrating applications, releases, and scan types through fcli fod commands. This skill manages SAST, DAST, SCA, and open-source scans while monitoring progress directly within developer workflows.
Manage Fortify on Demand applications and microservices releases by orchestrating them from a centralized skill using fcli commands. You can create releases, import artifacts, and list releases for an app to streamline end-to-end workflow cycles.
Fortify on Demand triage and audit work with fcli by automating issue triage and audit activities directly within your pipelines. The skill enforces mutating-operation safety rules and verification steps to securely manage and triage issues across releases.
You can start SAST and DAST scans on Fortify on Demand without manual intervention by executing fcli fod commands through this skill. It automates starting scans, importing artifacts, and monitoring scan progress across your applications and releases.
You need fcli installed to automate Fortify on Demand workflows because this skill exposes commands via the fcli fod module. The skill leverages these commands to orchestrate apps, releases, scans, and audit activities across your environment.
Limitations of automating Fortify on Demand scan workflows include enforced mutating-operation safety rules and verification steps. While the skill supports optional resources under scripts and references, all destructive or modifying actions are guarded to prevent unsafe pipeline executions.
fortifyReference Fortify CLI (fcli) usage, installation, and environment configuration for automation workflows.
nksethIdentify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.
HelloEverybobyAutomate SAST, DAST, and SCA security scans in CI/CD pipelines.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
