From 72a2535d1d37f9f06eac412919c71d19bd88c811 Mon Sep 17 00:00:00 2001
From: Mike Snowden <5297545+MikeTheSnowman@users.noreply.github.com>
Date: Mon, 21 Jul 2025 13:57:53 +1000
Subject: [PATCH] Add Fortify security scanning to CI/CD pipeline

---
 .github/workflows/ci.yml | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d961eae2433..22c357c1f5b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -461,4 +461,20 @@ jobs:
           git add .
           git commit -m "Update documentation for ${{ needs.build.outputs.release_tag }}"
           git push
-          
\ No newline at end of file
+          
+  security_scan:
+    name: Fortify Security Scan
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout source code
+        uses: actions/checkout@v4
+
+      - name: Run Fortify ScanCentral SCA
+        uses: fortify/github-action-fortify-scancentral@v2
+        with:
+          fortify-url: https://ams.fortify.com
+          fortify-tenant: FranklinBank24
+          fortify-client-id: ${{ secrets.FOD_CLIENT_ID }}
+          fortify-client-secret: ${{ secrets.FOD_CLIENT_SECRET }}
+          scan-types: sca
\ No newline at end of file