Identify and remediate Fortify findings across FoD and SSC with Aviator-guided patches.
npx skills add https://github.com/fortify/skills --skill fortify-remediate
Please help me install this Agent Skill. Skill: fortify-remediate Source: https://github.com/fortify/skills/tree/main/skills/fortify-remediate Command: npx skills add https://github.com/fortify/skills --skill fortify-remediate
Remediate Fortify findings detected by FoD/SSC with a structured, auditable workflow and Aviator-guided remediation, reducing effort and risk in vulnerability triage and fixes.
Run the remediation plan against the selected Fortify issues in your local workspace.
High-intent search queries and answers about installing and using this skill.
Remediate Fortify vulnerabilities using an Aviator-guided 4-step workflow that establishes context, targets issues, plans, and implements patches. It reads issue details and local source to produce minimal, auditable fixes.
Aviator-guided remediation is a structured 4-step process covering context establishment, issue targeting, planning, and implementation. It integrates Fortify reference guidance and issue data to produce concrete vulnerability fixes in the local codebase.
Yes, fcli is required to access Fortify platforms like FoD and SSC. The remediation process requires connecting to these platforms, reading embedded Aviator guidance, and accessing the local workspace source code to drive planning and validation.
Yes, you can plan minimal patches for a batch of Fortify issues across an application. The Skill scopes target issues, generates a patch plan using Aviator guidance, and validates the fixes with build and test execution.
Yes, it supports both FoD and SSC platforms with a consistent remediation process. It reads embedded Aviator guidance and Fortify issue data from either platform to generate concrete fixes and artifacts.
Automating Fortify vulnerability fixes requires local source code access, Fortify reference guidance files, and platform connectivity via fcli. Without these elements, the Skill cannot establish context or produce auditable patch plans.
fortifyReference Fortify CLI (fcli) usage, installation, and environment configuration for automation workflows.
vecearConvert npm audit and Snyk reports into prioritized patch plans.
Mo7amed-MahmoudRun parallel dependency, static, and privacy scans and emit severity findings.
Next-ofkinAutomate code review with static analysis and AI models.
