diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d961eae2433..22c357c1f5b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -461,4 +461,20 @@ jobs: git add . git commit -m "Update documentation for ${{ needs.build.outputs.release_tag }}" git push - \ No newline at end of file + + security_scan: + name: Fortify Security Scan + needs: build + runs-on: ubuntu-latest + steps: + - name: Checkout source code + uses: actions/checkout@v4 + + - name: Run Fortify ScanCentral SCA + uses: fortify/github-action-fortify-scancentral@v2 + with: + fortify-url: https://ams.fortify.com + fortify-tenant: FranklinBank24 + fortify-client-id: ${{ secrets.FOD_CLIENT_ID }} + fortify-client-secret: ${{ secrets.FOD_CLIENT_SECRET }} + scan-types: sca \ No newline at end of file