From 13211f360fccb66b43dc77bc5e9defc7a04df638 Mon Sep 17 00:00:00 2001
From: Mike Snowden <5297545+MikeTheSnowman@users.noreply.github.com>
Date: Sat, 19 Jul 2025 00:54:57 +1000
Subject: [PATCH] Add Fortify security scanning to CI/CD pipeline

---
 .github/workflows/ci.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d961eae2433..c810fb03225 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -444,7 +444,7 @@ jobs:
           touch _data/versions/release.yml
           touch _data/versions/dev.yml
           ls -d v*.*.* | sort -rV | while read line; do echo "- '$line'"; done > _data/versions/release.yml
-          ls -d dev_* | sort | while read line; do echo "- '$line'"; done > _data/versions/dev.yml
+          ls -d dev_* | sort | while read line; do echo "- '$line'" ; done > _data/versions/dev.yml
           
           # Update symlinks based on available versions, processing versions in ascending order
           # to replace previous links with a newer version if appropriate. For example, 'latest'
@@ -461,4 +461,7 @@ jobs:
           git add .
           git commit -m "Update documentation for ${{ needs.build.outputs.release_tag }}"
           git push
-          
\ No newline at end of file
+      - name: Start Fortify SAST and DAST Scans
+        run: |
+          java -jar ./tmp/release-assets/fcli.jar fod sast start
+          java -jar ./tmp/release-assets/fcli.jar fod dast start
\ No newline at end of file