fortify-remediate

Identify and remediate Fortify findings across FoD and SSC with Aviator-guided patches.

18|1|Updated Apr 22, 2026

Search Tags:#remediation #vulnerabilities #fortify #fod #fcli #ssc #aviator

Ready to run

npx skills add https://github.com/fortify/skills --skill fortify-remediate

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fortify-remediate
Source: https://github.com/fortify/skills/tree/main/skills/fortify-remediate
Command: npx skills add https://github.com/fortify/skills --skill fortify-remediate

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Remediate Fortify findings detected by FoD/SSC with a structured, auditable workflow and Aviator-guided remediation, reducing effort and risk in vulnerability triage and fixes.

Core Features & Use Cases

End-to-end remediation workflow covering context establishment, target scoping, planning, and implementation.
Integrates Aviator remediation guidance and Fortify issue data to produce concrete fixes in the local codebase.
Supports both FoD and SSC platforms with a consistent remediation process and artifact generation.
Real-world use: on a batch of Fortify issues across an app, plan minimal patches and validate with build/tests.

Quick Start

Run the remediation plan against the selected Fortify issues in your local workspace.

Frequently Asked Questions about fortify-remediate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I remediate Fortify vulnerabilities found in FoD or SSC?▼

Remediate Fortify vulnerabilities using an Aviator-guided 4-step workflow that establishes context, targets issues, plans, and implements patches. It reads issue details and local source to produce minimal, auditable fixes.

What is the Aviator-guided remediation workflow for Fortify findings?▼

Aviator-guided remediation is a structured 4-step process covering context establishment, issue targeting, planning, and implementation. It integrates Fortify reference guidance and issue data to produce concrete vulnerability fixes in the local codebase.

Do I need fcli installed to fix Fortify findings in my local workspace?▼

Yes, fcli is required to access Fortify platforms like FoD and SSC. The remediation process requires connecting to these platforms, reading embedded Aviator guidance, and accessing the local workspace source code to drive planning and validation.

Can I plan patches for a batch of Fortify issues across an application?▼

Yes, you can plan minimal patches for a batch of Fortify issues across an application. The Skill scopes target issues, generates a patch plan using Aviator guidance, and validates the fixes with build and test execution.

Does this approach support both FoD and SSC platforms consistently?▼

Yes, it supports both FoD and SSC platforms with a consistent remediation process. It reads embedded Aviator guidance and Fortify issue data from either platform to generate concrete fixes and artifacts.

What limitations exist when automating Fortify vulnerability fixes?▼

Automating Fortify vulnerability fixes requires local source code access, Fortify reference guidance files, and platform connectivity via fcli. Without these elements, the Skill cannot establish context or produce auditable patch plans.