Skip to content

Instantly share code, notes, and snippets.

@webmutation
Created October 13, 2023 19:29
Show Gist options
  • Save webmutation/8bd27baddda288b81438901521890b7b to your computer and use it in GitHub Desktop.
Save webmutation/8bd27baddda288b81438901521890b7b to your computer and use it in GitHub Desktop.
Footify CLI fcli useful commands
To get only specific results from SCA, Sonatype, etc... we can use the following
fcli ssc appversion-vuln count --appversion MyApp:version --by 11111111-1111-1111-1111-111111111151 -q id=SCA
fcli ssc appversion-vuln count --appversion MyApp:version --by 11111111-1111-1111-1111-111111111151 -q id=SONATYPE
It is currently not possible to combine grouping and filtering in the fcli, so the next best thing is to \
use filterset and then query to count for example the number of SCA High or Critical count
fcli ssc appversion-vuln count --appversion MyApp:version --filterset=32142c2d-3f7f-4863-a1bf-42jadfrfasd2ed -q id=High -o expr={visibleCount}
#NOTE: The filterset is can be obtained bu looking at the URL of the Audit tab of an application in fortify ui console.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment