Retrieve required credentials for Fortify on Demand (FOD) scans
The following credentials are required when configuring SAST, DAST, or MAST scans:
| Credentials | Where to retrieve |
|---|---|
| FOD Username | Token tab of the FOD application |
| CI Token | Token tab of the FOD application |
| Release ID | Releases tab of the FOD application |
Only Subscription Admins (SAs) and Project Admins (PAs) can retrieve this information from Console. Users without SA or PA access must contact their Project Admin.
Retrieve credentials
- In Console, go to Products > SHIP-HATS.
- Select the required subscription.
- Select the required SHIP-HATS project.
- Click the ellipsis (…) next to the FOD application, then select Manage.
- Go to the Token tab to retrieve the FOD Username and CI Token. See Manage FOD token.
- Go to the Releases tab to retrieve the Release ID. See Manage FOD releases.
Things to note
- The CI Token authenticates CI/CD pipelines with FOD. Share it securely and do not expose it in public repositories.
- Ensure the Release ID corresponds to the release configured for scanning. If no release exists, create one before retrieving the Release ID.
