Retrieve scan results from HP Fortify Security Center

Question

I am trying to provide a consolidated method of retrieving the results of the last scan for each project in HP Fortify Security Center.

I have gone the route of querying the fortifySSC database and am falling a little short. Has anyone ever attempted to do this by way of a SQL query?

I would be happy to provide the query that I have thus far, if needed.

Or if anyone has an idea on how to accomplish this via the command line, I'd be in interested in that, too.

Thanks in advance for your help!

Answer 1

I did get the query I needed via the SQL Profiler, so that's how I resolved this.

Answer 2

i´ve never done this in the CLI via SQL commands. But there is a utility called fortifyclient that is able to download the latest FPRs from a project. if you want to automate things, fortifyclient can handle token-based authentication. works for us perfectly in our CI environment.