HPE Security Fortify Assessment is not showing " List of HPE Security Fortify SSC issues " in jenkins after uploading .fpr report on ssc portal
I am checking out a project from git . Then I am building it using my own build script of maven. I am running a fortify scan for maven project . After that I am getting a .fpr report with help of HPE Security Fortify Assessment plugin ,it is also getting uploaded to Fortify portal .
I want to see my report on Jenkins portal itself . When I am clicking " HPE Security Fortify Assessment" tab it is shoWing nothing ,rather it shows
You have to build your project in order to access Fortify Assessment results
Can some one please tell me what am I missing.
Below is the image of
Configuration of HPE Security Fortify Assessment pluign in my jenkins
![][1][1]](https://i.sstatic.net/c3QYx.png)
Finally ,I got the answer . My root project had some docker projects also to build along with maven based java projects ,and I had not installed docker on my centos machine and while building it always gave error of docker-compose: command not found which was resulting in a non-successful build internally but later on it was showing successfully because java project was built properly . But HPE Fortify assessment plugin was giving error that Project has to build successfully ,hence I analysed the logs and installed docker-compose and docker on centos after that it started showing list of issues.
- Sizeof vs array size
- How to make copilot not leak secret credentials with Neovim plugin?
- Does the client knowing all the endpoint names pose a security risk?
- Securing a client-side API
- How to disable security in Quarkus
- SNC name of ABAP System
- Is MD5 a good way to generate account verification code
- Is there any relationship between Secure Boot and Kernel Lockdown?
- CryptographicException: Access denied - How to give access on User store?
- How to use an API from my mobile app without someone stealing the token
- Symfony security component - Unable to find key \"username\" in the token payload
- Is it a good praxis to secure an webservice endpoint with a simple token string?
- Can using access token alone prevent CSRF attack, since browser prevents accessing cookies of another site?
- Are there CSRF attacks that don't use cookies?
- How does Double Submit Cookie Pattern Prevent against CSRF attacks?
- vulnerable Tomcat 10.1.31 embedded in Artifactory 7.98.13
- Why CSRF token should be in meta tag and in cookie?
- How can I prevent SQL injection in PHP?
- How/why is login page redirect required?
- Do Electron apps enforce CORS restrictions in the renderer process?
- How can i use a reverse shell over global Internet?
- Should I Manually Patch the Pandas DataFrame.query() Vulnerability or Wait for an Official Update?
- C# - Securely storing a password locally
- how to secure keys for API calls from android device to amazon services
- Should I add application.properties to .gitignore if the Git repository is private and both the server and DB are on an internal network?
- Understanding the port numbers of a network connection strings in systemd output of an ubuntu device
- Disable firefox same origin policy
- SecurityError: Blocked a frame with origin from accessing a cross-origin frame
- Securely decoding a Base64 character array in Java
- Is There a Security Risk Using ADB Over TCP/IP for Wireless App Development in Expo?