diff --git a/.github/workflows/fortify.yml b/.github/workflows/fortify.yml index 7459b25c..11930d9d 100644 --- a/.github/workflows/fortify.yml +++ b/.github/workflows/fortify.yml @@ -68,7 +68,7 @@ jobs: # Credentials and release ID should be obtained from your FoD tenant (either Personal Access Token or API Key can be used). # Automated Audit preference should be configured for the release's Static Scan Settings in the Fortify on Demand portal. - name: Download Fortify on Demand Universal CI Tool - uses: fortify/gha-setup-fod-uploader@16e5036c084b26cee63cb0c38cfc2101cc9fd13d + uses: fortify/gha-setup-fod-uploader@e633769408318bd54b9ab2a7f62bf1f39d0df835 - name: Perform SAST Scan run: java -jar $FOD_UPLOAD_JAR -z package.zip -aurl $FOD_API_URL -purl $FOD_URL -rid "$FOD_RELEASE_ID" -tc "$FOD_TENANT" -uc "$FOD_USER" "$FOD_PAT" $FOD_UPLOADER_OPTS -n "$FOD_UPLOADER_NOTES" env: