Fortify On Demand (FOD) pipeline templates
SHIP-HATS provides GitLab CI/CD pipeline templates to integrate Fortify On Demand (FOD) security scans into your development pipelines.
These templates allow development teams to trigger security scans and generate vulnerability reports automatically as part of the CI/CD process.
Using these templates helps teams:
- Integrate security testing into development pipelines
- Standardise security scanning across projects
- Generate security reports automatically
For general information about pipeline templates, see Pipeline templates.
Available pipeline templates
The following GitLab templates are available for Fortify On Demand.
FOD Scan templates
Use these templates to trigger security scans during the CI/CD pipeline.
| Template | Purpose |
|---|---|
| FOD Scan | Runs Fortify On Demand scans within the pipeline. |
| SAST | Performs Static Application Security Testing on application source code. |
| DAST | Performs Dynamic Application Security Testing on running applications. |
| MAST | Performs Mobile Application Security Testing. |
| Package .NET source code using ScanCentral for FOD SAST processing | Packages .NET source code before running SAST scans. |
| SAST-MSBuild | Performs SAST scans for .NET applications using MSBuild. |
FOD Report templates
Use these templates to generate security reports after scans are completed.
| Template | Purpose |
|---|---|
| FOD Report | Generates security reports from completed FOD scans. |
| SAST Report | Generates reports for SAST scan results. |
| DAST Report | Generates reports for DAST scan results. |
When to use pipeline templates
Use FOD pipeline templates when you want to:
- Run automated security scans during CI/CD builds
- Detect vulnerabilities early in the development lifecycle
- Generate vulnerability reports as part of your pipeline
