Scan code in pega databse using Microfocus Fortify tool

Pega-as-a-Service
, , , , ,
1

Hi Support Team,

We are looking for a way to scan to the code which is stored in the Pega database. Could you explain how it is to be done?

As Security analyzer built-in feature in Pega will only scan the custom code build and not autogenerated Pega rules/codes there is a requirement to scan the complete code which includes both.

Need this information as client has Microfocus Fortify tool and want to run complete code using it.

Regards,

Sachin

2

@SachinV16646564 this question, or ones like it ,have been asked on the forum before.

Please could you take a look at the questions below to see if these provide the answers?

HP Fortify and Pega 7.1.x | Support Center

Running Fortify Scans against Pega generated code | Support Center

Is it possible to run static security scans ( Fortify) in pega for both pega generated code and custom code? I mean basically for the entire code base. | Support Center

Pegasystems Documentation

Pegasystems Documentation

For details on static scans of Pega’s product code, please contact Vendor Assessment Inquiries by email at [email protected] and that team will respond to your inquiry.

3

@MarijeSchillern Thanks, It helps :slight_smile:

Regards,

Sachin