Hygieia Security Collectors / Fortify

Fortify finds software issues of several kinds; however, fortify-collector is only intended to gather security issues.

This project uses Spring Boot to package the collector as an executable JAR with dependencies.

Building and Deploying

Run the following command to package the collector into an executable jar. Find the jar file at target/.

mvn clean install package

Copy this file to your server and launch it using:

java -jar fortify-api-collector-3.0.0-SNAPSHOT.jar --spring.config.location=[path to application.properties file]

application.properties

You will need to provide an application.properties file that contains information about how to connect to the Dashboard MongoDB database instance, as well as properties that Fortify collector requires. See the Spring Boot documentation for information about sourcing this properties file.

Sample application.properties file

# Database Name
dbname=dashboard

# Database HostName - default is localhost
dbhost=10.0.1.1

# Database Port - default is 27017
dbport=27017

# Database Username - default is blank
dbusername=db

# Database Password - default is blank
dbpassword=dbpass


# Collector schedule (required)
fortify.cron=0 0/5 * * * *