Fortify SonarQube Plugin

88982

James R Community

App Support Tiers

OpenText SUPPORTED

Support via OpenText Software Support, with a ticket filed against the associated product.

PARTNER

OpenText offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by OpenText of the OpenText community.

OpenText COMMUNITY

OpenText Community Content is provided by OpenText for the benefit of customers, support for it is not available via OpenText Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by OpenText customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "Cybersecurity Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official OpenText/Cybersecurity product releases. OpenText has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. OpenText strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

James R | Community

Fortify SonarQube plug-in allows for importing Fortify scan results from Software Security Center into SonarQube.

1,159 downloads

Product compatibility

Description

The Fortify SonarQube plugin allows for importing Fortify scan results into SonarQube. This includes the following features:

Load vulnerability data from Fortify SSC and display each vulnerability as a SonarQube violation
Load various metrics and other meta-data from Fortify SSC, like issue counts and artifact status.
Metrics are shown on the custom Fortify dashboard in SonarQube, and can be used to define Quality Gates.

This plugin was developed by Fortify Professional Services in collaboration with the customer community. The plugin is provided as-is and is not supported through the regular Fortify support channels. If you require assistance with deployment, bug fixes or enhancements, we encourage you to reach out to your Fortify Professional Services representative, or send an email to fortify-plugins-request@microfocus.com.

Source code: https://github.com/fortify-ps/fortify-integration-sonarqube-ssc
Releases: https://github.com/fortify-ps/fortify-integration-sonarqube-ssc/releases
More information: https://github.com/fortify-ps/fortify-integration-sonarqube-ssc/blob/master/README.md

Suggested apps

New

Community

Sonatype for Fortify SSC

Sonatype

This bundle contains the parser plugin for Fortify Software Security Center and an integration service that can integrate results from Sonatype's Nexus Lifecycle alongside findings from SCA, providing a consolidated view of application vulnerabilities.

836

New

Community

Black Duck Hub Integration with SSC

James Rabon

View results of Black Duck's open source security testing along with Fortify app security scan results

CHEF Cookbooks for Fortify

OpenText

IBM DB2

OpenText

This Novell Sentinel Collector provides data-capture capabilities for IBM DB2 and related products.

FREE

New

OpenText COMMUNITY

Playbook-Access Attempt on Unidentified Protocol Ports

OpenText

A Playbook for Access Attempts on Unidentified Protocols and Ports Usecase

Process

OpenText

This Novell Sentinel Connector allows you to start external processes and capture the output from those processes.

FREE

New

OpenText COMMUNITY

Default System Zone

OpenText

Update default system zones.

FREE

New

OpenText COMMUNITY

Playbook-Check IP Reputation from Multiple Sources

OpenText

A Playbook for Check IP Reputation from Multiple Sources Usecase

Voltage SmartCipher

OpenText

SmartCipher transparently encrypts and embeds with access and use controls that protect files wherever they go, enforced by centralized policy management for real-time monitoring, discovery, and classification.

Releases

Release

Date

Fortify SonarQube Plugin 2.6

Jan 8, 2020

More info Less info

Product compatibility

Fortify Software Security Center

Version 18.10 · 18.20

Version 19.10 · 19.20

Version 20.10 · 20.20

Version 21.1 · 21.2

Version 22.1 · 22.2

Version 23.1

Release notes

SSC: Fixed generated deep links not working with SSC 19.1
General: Updated dependencies & dependency versions to avoid using potentially vulnerable dependencies

Languages

English

Fortify SonarQube Plugin 2.3

Jun 6, 2018

More info Less info

Product compatibility

Fortify Software Security Center

Version 18.10 · 18.20

Release notes

See https://github.com/rsenden/fortify-integration-sonarqube-ssc

Languages

English

Fortify SonarQube Plugin 1.3

21.7 MB

Jun 9, 2017

More info Less info

Product compatibility

Fortify Software Security Center

Version 17.1

Release notes

Added support for multi-module projects
Now contains all 3rd-party dependency sources

Languages

English

Files

(21.7 MB)

(13.3 KB)

Marketplace

Marketplace

Fortify SonarQube Plugin

Product compatibility

CATEGORY

Description

Suggested apps

Sonatype for Fortify SSC

Black Duck Hub Integration with SSC

CHEF Cookbooks for Fortify

IBM DB2

Playbook-Access Attempt on Unidentified Protocol Ports

Process

Default System Zone

Playbook-Check IP Reputation from Multiple Sources

Voltage SmartCipher

Releases

Sign in

Marketplace

Fortify SonarQube Plugin

App Support Tiers

Product compatibility

CATEGORY

Description

Suggested apps

Sonatype for Fortify SSC

Black Duck Hub Integration with SSC

CHEF Cookbooks for Fortify

IBM DB2

Playbook-Access Attempt on Unidentified Protocol Ports

Process

Default System Zone

Playbook-Check IP Reputation from Multiple Sources

Voltage SmartCipher

Releases

Unsubscribe from notifications

Marketplace Terms of Service

Your download has begun