Fortify SonarQube Plugin

88982

James R Community

App Support Tiers

OpenText SUPPORTED

Support via OpenText Software Support, with a ticket filed against the associated product.

PARTNER

OpenText offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by OpenText of the OpenText community.

OpenText COMMUNITY

OpenText Community Content is provided by OpenText for the benefit of customers, support for it is not available via OpenText Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by OpenText customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "Cybersecurity Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official OpenText/Cybersecurity product releases. OpenText has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. OpenText strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

James R | Community

Fortify SonarQube plug-in allows for importing Fortify scan results from Software Security Center into SonarQube.

1,160 downloads

Product compatibility

Description

The Fortify SonarQube plugin allows for importing Fortify scan results into SonarQube. This includes the following features:

Load vulnerability data from Fortify SSC and display each vulnerability as a SonarQube violation
Load various metrics and other meta-data from Fortify SSC, like issue counts and artifact status.
Metrics are shown on the custom Fortify dashboard in SonarQube, and can be used to define Quality Gates.

This plugin was developed by Fortify Professional Services in collaboration with the customer community. The plugin is provided as-is and is not supported through the regular Fortify support channels. If you require assistance with deployment, bug fixes or enhancements, we encourage you to reach out to your Fortify Professional Services representative, or send an email to fortify-plugins-request@microfocus.com.

Source code: https://github.com/fortify-ps/fortify-integration-sonarqube-ssc
Releases: https://github.com/fortify-ps/fortify-integration-sonarqube-ssc/releases
More information: https://github.com/fortify-ps/fortify-integration-sonarqube-ssc/blob/master/README.md

Suggested apps

New

Community

Sonatype for Fortify SSC

Sonatype

This bundle contains the parser plugin for Fortify Software Security Center and an integration service that can integrate results from Sonatype's Nexus Lifecycle alongside findings from SCA, providing a consolidated view of application vulnerabilities.

Start Rogue Admin Workflow

OpenText

This Novell Sentinel Action allows you to: Start Rogue Admin Workflow.

New

Community

Airlock WAF

Ergon Informatik AG

Airlock Suite deals with the issues of filtering and authentication in one complete and coordinated solution – setting standards for usability and services. Airlock Suite is protecting more than 30.000 back-ends and 15 million identities around the globe.

New

Community

Black Duck Hub Integration with SSC

James Rabon

View results of Black Duck's open source security testing along with Fortify app security scan results

FREE

New

OpenText

NetIQ Self Service Password Reset

OpenText

This NetIQ Sentinel Collector provides data-capture capabilities for NetIQ Self Service Password Reset and related products.

New

OpenText COMMUNITY

SmartConnector User's Guide

OpenText

Pretty much everything you need to know about collecting events using ArcSight SmartConnectors.

NetIQ Privileged Account Manager

OpenText

This NetIQ Sentinel Collector provides data-capture capabilities for NetIQ Privileged Account Manager and related products.

FREE

New

OpenText COMMUNITY

Playbook-Access Attempt on Unidentified Protocol Ports

OpenText

A Playbook for Access Attempts on Unidentified Protocols and Ports Usecase

IBM zOS

OpenText

This Novell Sentinel Collector provides data-capture capabilities for IBM z/OS and related products.

Releases

Release

Date

Fortify SonarQube Plugin 2.6

Jan 8, 2020

More info Less info

Product compatibility

Fortify Software Security Center

Version 18.10 · 18.20

Version 19.10 · 19.20

Version 20.10 · 20.20

Version 21.1 · 21.2

Version 22.1 · 22.2

Version 23.1

Release notes

SSC: Fixed generated deep links not working with SSC 19.1
General: Updated dependencies & dependency versions to avoid using potentially vulnerable dependencies

Languages

English

Fortify SonarQube Plugin 2.3

Jun 6, 2018

More info Less info

Product compatibility

Fortify Software Security Center

Version 18.10 · 18.20

Release notes

See https://github.com/rsenden/fortify-integration-sonarqube-ssc

Languages

English

Fortify SonarQube Plugin 1.3

21.7 MB

Jun 9, 2017

More info Less info

Product compatibility

Fortify Software Security Center

Version 17.1

Release notes

Added support for multi-module projects
Now contains all 3rd-party dependency sources

Languages

English

Files

Marketplace

Marketplace

Fortify SonarQube Plugin

Product compatibility

CATEGORY

Description

Suggested apps

Sonatype for Fortify SSC

Start Rogue Admin Workflow

Airlock WAF

Black Duck Hub Integration with SSC

NetIQ Self Service Password Reset

SmartConnector User's Guide

NetIQ Privileged Account Manager

Playbook-Access Attempt on Unidentified Protocol Ports

IBM zOS

Releases

Sign in

Marketplace

Fortify SonarQube Plugin

App Support Tiers

Product compatibility

CATEGORY

Description

Suggested apps

Sonatype for Fortify SSC

Start Rogue Admin Workflow

Airlock WAF

Black Duck Hub Integration with SSC

NetIQ Self Service Password Reset

SmartConnector User's Guide

NetIQ Privileged Account Manager

Playbook-Access Attempt on Unidentified Protocol Ports

IBM zOS

Releases

Unsubscribe from notifications

Marketplace Terms of Service

Your download has begun