From 728d66698943e5baf24af5d699fd5c200e7d236a Mon Sep 17 00:00:00 2001
From: Mike Snowden <5297545+MikeTheSnowman@users.noreply.github.com>
Date: Mon, 21 Jul 2025 16:56:46 +1000
Subject: [PATCH] Add Fortify security scanning to CI/CD pipeline

---
 .github/workflows/ci.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d961eae2433..5f896f9c76b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -89,7 +89,15 @@ jobs:
         with:
           name: build-output
           path: build/dist/**/*
-          
+
+      - name: Fortify Security Scan
+        uses: fortify/github-action@v2
+        with:
+          fod_url: https://ams.fortify.com
+          fod_tenant: FranklinBank24
+          fod_pat: ${{ secrets.FOD_PAT }}
+          scan_types: '{"sca":true,"sast":false,"dast":false,"security_gateway":false}'
+
     outputs:
       do_release: ${{ env.DO_RELEASE }}
       do_prod_release: ${{ env.DO_PROD_RELEASE }}
@@ -460,5 +468,4 @@ jobs:
           git config user.email github-actions@fortify.com
           git add .
           git commit -m "Update documentation for ${{ needs.build.outputs.release_tag }}"
-          git push
-          
\ No newline at end of file
+          git push
\ No newline at end of file