Comments (3)
Thank you for providing the details. This has been brought up to the dev team - currently if you poll FoDUploader returns an exit code of 3 for canceled scans.
from fod-uploader-java.
Hello,
To confirm, you are running it via GitHub actions and aren't checking the scan status via polling?
from fod-uploader-java.
Yes, that's right, via GitHub actions and i'm not polling.
- name: Download Fortify on Demand Universal CI Tool
uses: fortify/gha-setup-fod-uploader@v1
- name: Perform SAST Scan
run: java -jar $FOD_UPLOAD_JAR -z package.zip -aurl $FOD_API_URL -purl $FOD_URL -rid "$FOD_RELEASE_ID" -tc "$FOD_TENANT" -ac "$FOD_KEY" "$FOD_SECRET" $FOD_UPLOADER_OPTS -n "$FOD_UPLOADER_NOTES"
continue-on-error: true
env:
FOD_TENANT: ${{ secrets.FOD_TENANT }}
FOD_KEY: ${{ secrets.FOD_KEY }}
FOD_SECRET: ${{ secrets.FOD_SECRET }}
FOD_RELEASE_ID: ${{ secrets.FOD_RELEASE_ID }}
FOD_URL: "https://emea.fortify.com/"
FOD_API_URL: "https://api.emea.fortify.com/"
FOD_UPLOADER_OPTS: "-ep 1 -pp 0"
FOD_UPLOADER_NOTES: 'Triggered by GitHub Actions (${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})'
from fod-uploader-java.
Related Issues (20)
- com.google.gson.JsonSyntaxException: java.lang.IllegalStateException: Expected BEGIN_OBJECT but was STRING at line 1 column 1 path $ HOT 4
- Upload Process Failed HOT 1
- Request to amend Java parameters in -languageLevelId / -l
- Result polling does not watch the correct scan when multiple workflows queue multiple scans HOT 2
- [Enhancement] Request that these binaries should be uploaded to maven central to enable simple integration with build scripts. HOT 2
- -apiCredentials doesn't work when there is a comma in the secret
- Invalid entitlement/assessment type HOT 2
- "This application was configured to use a bundled Java Runtime Environment but the runtime is missing or corrupted." HOT 2
- -ITP is not being accepted on the command line HOT 1
- Scan rejected after entitlement expired while there are valid entitlements available to start a new subscription
- Translation to PowerShell HOT 1
- -isRemediationScan flag not accepted HOT 4
- Return non-zero if scan fails policy HOT 1
- [Fortify Commit Analyzer] 1 security weaknesses detected
- Consume credentials via environment variables? HOT 1
- Could not determine java version from '11.0.6' when Gradle build?
- "Binary Scanning option is not allowed", even though disabled HOT 2
- Erroneous version on latest release
- java.lang.NullPointerException - release not found HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fod-uploader-java.