GitHub Actions Configuration

This directory contains GitHub Actions-specific configuration and documentation for fcli integration testing.

Configuration

See config.json for:

• Repository URL
• Supported operating systems
• Integration versions
• Required secrets

Test Pipeline

The test pipeline is located at .github/workflows/test-pipeline.yml.

This pipeline file is synced to remote GitHub repositories where it executes tests using different versions of the fortify/github-action.

Secrets

The following secrets must be configured in the GitHub repository (prefixed with FCLI_FT_ for functional testing):

• FCLI_FT_FOD_URL - Fortify on Demand URL
• FCLI_FT_FOD_CLIENT_ID - FoD API client ID
• FCLI_FT_FOD_CLIENT_SECRET - FoD API client secret
• FCLI_FT_SSC_URL - Software Security Center URL
• FCLI_FT_SSC_TOKEN - SSC authentication token
• FCLI_FT_SC_SAST_TOKEN - ScanCentral SAST token