-
734 items
211 item
9 item
1 item
13 item
88 item
237 item
10 item
169 item - For developers
Sonatype Lifecycle is a leading Software Composition Analysis (SCA) tool providing enterprises with real-time visibility and control over open-source dependencies across the Software Development Lifecycle (SDLC). Compliment your SaST, DaST and IaST finding in Fortify SSC with the world’s leading Open Source security vendor.
This solution is ideal for organizations seeking comprehensive, automated protection against software supply chain risks. With Lifecycle, you can:
Lifecycle’s advanced dependency management and AI-driven insights help developers maintain high code quality and security while accelerating delivery. This solution is ideal for organizations seeking comprehensive, automated protection against software supply chain risks.
Sonatype for Fortify SSC integration accomplishes this with:
This plugin is free for all Sonatype Lifecycle customers.
The plugin parser and integration have been developed and tested with Fortify SSC versions 19 and later
Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
- Fixed issue where sync service did not terminate as expected when the `killProcess` flag was set to `true`
- Added support for `fortifyApplicationId` when using the `startScanLoad` endpoint
- Performance Improvements
- scheduling.job.cron is replaced with scheduling.fixed.rate.minutes
- CVSS scores when only Sonatype CVSS Score Exists fixed
## Changelog
- Bug fix related to fetching most recent report from the IQ Server
- Overall performance improvements
loadfile.cache which can be set to false to prevent IQ reports from being cachedPerformance Improvements: mapping files are now processed in parallel and the process is now up to 10x faster
Updating artifacts upload logic to upload when:
2.5.6 to 2.6.6 in response to CVE-2022-22965Fixed issue where all vulns were coming in as Vulnerable OSS with a CVE number attached. Added a 'recommended version' to the remediation guidance
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox