Fortify on Demand - 5 Ways to Perform Static Code Scans

This quick explainer shows 5 ways to perform static application security testing (SAST) in Fortify in Demand (FoD):
1. Manually Initiated Scans [0:46]
2. Scans Initiated Using FoD Uploader [1:58]
3. Scans Initiated From a Supported IDE [3:58]
4. Scans Initiated From a CI Pipeline [5:10]
5. Scans Initiated From a Tool that Uses the FoD REST APIs [7:12]
Referenced videos:
Fortify on Demand - Static Code Analysis
• Fortify on Demand - St...
Fortify on Demand - Static Scan Workflow
• Fortify on Demand - St...
Fortify on Demand - Universal CI/CD Upload Tool
• Fortify on Demand - Un...
Fortify on Demand - Installing Visual Studio Plugin
• Fortify on Demand - In...
Fortify on Demand - Eclipse Plugin
• Fortify on Demand - Ec...
Fortify on Demand - Azure DevOps Features and Functionality
• Fortify on Demand - Az...
LEARN MORE about Fortify: www.microfocus.com/en-us/solu...
LEARN MORE about how Micro Focus was named a leader in the Gartner MQ for Application Security Testing: software.microfocus.com/en-us...
LEARN MORE about how Fortify received the highest score in the Gartner Critical Capabilities for Application Security Testing report for the Enterprise use case AND the Mobile and Client use case: www.microfocus.com/en-us/asse...
SUBSCRIBE TO FORTIFY UNPLUGGED: / @fortifyunplugged
CONNECT with the Fortify Online Community: community.microfocus.com/t5/F...
- Connect with peers and share your knowledge
- Find solutions and answers to your technical questions
- Stay informed on new releases and product enhancements
- Access downloads, demos, videos and support tips

[@BrentJenkins10]

Great simple walkthrough of the different ways to scan code in Fortify on Demand. Appreciate the Pros/Cons section of each different way and the reference to other videos to see more. Great video!

[@FortifyUnplugged]

Thanks! This is a great video for anybody using Fortify on Demand.

[@neilmeadowcroft9347]

Thanks Simon, clear and concise.

[@FortifyUnplugged]

Thanks! And we agree...Simon did a really good explanation for anybody becoming familiar with Fortify on Demand.

[@trymheichermoen9460]

When i upload source code and dependencies it says it expects there to be runable files in there. This is for a .Net application. Only ting that makes sense is to upload compiled code, but that gives no scan results...

[@trymheichermoen9460]

I mean. It does not make sense, but it's the only files that I have found SAST to accept.

[@FortifyUnplugged]

Hi there, we need a little more information to assist you. Please reach out to our support team and they'll be able to help: www.microfocus.com/en-us/support