From f1bac86c1716f979ffbb91f9fb7b8d876ffbf1fc Mon Sep 17 00:00:00 2001
From: Mike Snowden <5297545+MikeTheSnowman@users.noreply.github.com>
Date: Wed, 23 Jul 2025 08:48:13 +1000
Subject: [PATCH] Add Fortify security scanning to CI/CD pipeline

---
 .github/workflows/ci.yml | 30 +++++++++++++++++++++++++++++-
 1 file changed, 29 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d961eae2433..bd9e6bfa20f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -461,4 +461,32 @@ jobs:
           git add .
           git commit -m "Update documentation for ${{ needs.build.outputs.release_tag }}"
           git push
-          
\ No newline at end of file
+          
+  security_scan:
+    name: Fortify Security Scan
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Check-out source code
+        uses: actions/checkout@v4
+
+      - name: Set up Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Run Fortify Scan
+        uses: fortify/github-action@v2
+        with:
+          fortify-url: https://ams.fortify.com
+          fortify-tenant: FranklinBank24
+          scan-types: sca
+          build-tool: gradle
+          build-command: build
+          project-name: ${{ github.repository }}
+          application-name: ${{ github.repository }}
+          release-name: ${{ needs.build.outputs.release_version }}
+          fod-pat: ${{ secrets.FOD_PAT }}
+          fod-client-id: ${{ secrets.FOD_CLIENT_ID }}
+          fod-client-secret: ${{ secrets.FOD_CLIENT_SECRET }}
\ No newline at end of file