42 lines
1.7 KiB
PowerShell
42 lines
1.7 KiB
PowerShell
param(
|
|
$FortifyProjectId = "edifoundation-oauth2Proxy",
|
|
$FortifyVersionId = "Main",
|
|
$FortifyBuildId = "fortify_fl",
|
|
$FortifyFprPath = "$PSScriptRoot\$FortifyProjectId.$FortifyVersionId.fpr",
|
|
$PublishURL = "https://fortify.philips.com/ssc",
|
|
$PublishAuthToken = "785de478-dc2d-4829-959c-ea5cb8cd1adc",
|
|
$RepositoryRoot = "$PSScriptRoot\..\..\"
|
|
)
|
|
|
|
function Invoke-VswhereDownload (
|
|
[string]$Uri = "https://github.com/microsoft/vswhere/releases/download/2.8.4/vswhere.exe",
|
|
[string]$Outfile = "$PSScriptRoot\vswhere.exe"
|
|
) {
|
|
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
|
|
Write-Output "downloading from '$Uri' to '$Outfile'"
|
|
Write-Output "please wait..."
|
|
Invoke-WebRequest -Uri $Uri -OutFile $Outfile
|
|
}
|
|
|
|
try {
|
|
$RepositoryRoot = [System.IO.Path]::GetFullPath($RepositoryRoot)
|
|
|
|
& sourceanalyzer -b $FortifyBuildId -clean -logfile "$PSScriptRoot\fortify-clean.txt"
|
|
|
|
& sourceanalyzer -Xmx8G -b $FortifyBuildId "$RepositoryRoot\contrib"
|
|
& sourceanalyzer -b $FortifyBuildId -show-files
|
|
& sourceanalyzer -Xmx8G -b $FortifyBuildId -Dcom.fortify.sca.Phase0HigherOrder.Languages=javascript,typescript -scan -f $FortifyFprPath -logfile "$PSScriptRoot\fortify-scan.txt"
|
|
|
|
#Upload fpr reports to fortify server
|
|
Write-Output "Uploading '$FortifyFprPath' of '$FortifyProjectId' with version '$FortifyVersionId' to '$PublishURL'"
|
|
& cmd /c fortifyclient.bat -url $PublishURL -authtoken $PublishAuthToken uploadFPR -file $FortifyFprPath -application $FortifyProjectId -applicationVersion "$FortifyVersionId"
|
|
|
|
Write-Output "Completed Fortify scan"
|
|
}
|
|
catch {
|
|
$ErrorMessage = $_.Exception.Message
|
|
Write-Error $ErrorMessage
|
|
Write-Output $ErrorMessage
|
|
exit -1
|
|
}
|