Closed JohnNKing closed 2 weeks ago
Combine with #721?
Answer = no
Ensure "additional automated security scanning (could be informed by the ISSO)." Per Eng Block on 1/17/24
Need to be in citrix remote desktop:
https://docs.cdc.gov/docs/devsecops/services/code-scan/fortify
I requested access to fortify from the cdc sharepoint form and am awaiting a response. After I hear back I can request access for everyone on the team
I just emailed the SoftwareAssurance team at the cdc to follow up on the access to fortify scans. I haven't received any word from them so figured I'd give them a poke to get a status update.
This is in progress and confirmed that the information I gave to the Fortify team is sufficient.
This should be for both the intermediary and the ingestion service.
Finished our first pass on Fortify. We marked what we thought were false positives and set the remaining issues as under review due to needing research or a group decision to be made.
Backlog Task
Work with our CDC security contact to perform Fortify scans on our code base.
Completion Criteria
Tasks