Repositories list

• IWA-PharmacyDirect

  Public
  IWA (Insecure Web App) Pharmacy Direct - an insecure web application for use in DevSecOps scenarios.

  javajqueryjenkins+ 9devopsspringmavenscawebinspectfortifysecurity-automation+ 2

  Java

  •

  GNU General Public License v3.0

  •29•12•6•0•Updated Oct 18, 2024Oct 18, 2024

• github-actions

  Public
  Common GitHub Actions used in multiple repositories

  GNU General Public License v3.0

  •1•0•0•0•Updated Oct 18, 2024Oct 18, 2024

• FortifyDemoApp

  Public
  Insecure Web application for use in Fortify demonstrations

  sampleappsecfortify+ 1fortify-on-demand

  CSS

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Oct 16, 2024Oct 16, 2024

• IWA-API-Node

  Public
  An insecure Node/Express REST API for use in Fortify demonstrations

  TypeScript

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Oct 9, 2024Oct 9, 2024

• sbom-import

  Public
  An example script to import CycloneDX SBOM into FoD

  Shell

  •0•0•0•0•Updated Aug 28, 2024Aug 28, 2024

• DebrickedDemoApp

  Public
  An insecure web application for use in Debricked demonstrations.

  Java

  •2•0•0•0•Updated Jul 12, 2024Jul 12, 2024

• PharmaBot

  Public
  A TensorFlow ChatBot for use in Fortify/Debricked demonstrations

  CSS

  •

  Other

  •0•0•0•0•Updated Jul 10, 2024Jul 10, 2024

• EightBallCpp

  Public
  C++ version of the Fortify demo application

  C++

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Jul 8, 2024Jul 8, 2024

• fcli-actions

  Public
  Fortify Command Line (fcli) Actions used in multiple repositories

  GNU General Public License v3.0

  •0•0•0•0•Updated Jul 1, 2024Jul 1, 2024

• OctaneDemoApp

  Public
  Insecure Web application for use in Fortify/ALM Octane demonstrations

  CSS

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated May 23, 2024May 23, 2024

• IWA-API-Java

  Public
  An insecure Spring Boot/Java REST API for use in Fortify demonstrations

  Java

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated May 17, 2024May 17, 2024

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •11k•0•0•0•Updated Apr 26, 2024Apr 26, 2024

• IWA-DotNet

  Public
  Insecure Web Application - .NET version

  C#

  •

  GNU General Public License v3.0

  •32•0•0•0•Updated Apr 24, 2024Apr 24, 2024

• FortifyDemoApp.py

  Public
  Insecure NodeJS web application for use in Fortify Demonstrations

  nodejssecurityfortify

  GNU General Public License v3.0

  •0•0•0•0•Updated Mar 18, 2024Mar 18, 2024

• FortifyMuleSoftDemo

  Public
  An example MuleSoft Anypoint project for use in Fortify Demonstrations

  apisecurityanypoint+ 2mulesoftfortify

  RAML

  •1•1•0•0•Updated Mar 14, 2024Mar 14, 2024

• WebGoat

  Public
  WebGoat is a deliberately insecure application

  JavaScript

  •

  Other

  •5.5k•0•0•0•Updated Mar 4, 2024Mar 4, 2024

• IWA-Mobile

  Public
  IWA-Mobile is an insecure React Native mobile application for use in Fortify Demonstrations

  JavaScript

  •

  GNU General Public License v3.0

  •2•0•0•0•Updated Dec 13, 2023Dec 13, 2023

• azure-pipelines-debricked-tasks

  Public
  Debricked CLI Tasks for Azure Pipelines

  TypeScript

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated Dec 12, 2023Dec 12, 2023

• azure-pipelines-fcli-tasks

  Public
  Fortify CLI (fcli) Tasks for Azure Pipelines

  TypeScript

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated Dec 12, 2023Dec 12, 2023

• .github

  Public
  0•0•0•0•Updated Nov 24, 2023Nov 24, 2023

• IaC-Samples

  Public
  Sample Infrastructure as Code files with vulnerabilities for use in Fortify demonstrations

  HCL

  •

  MIT License

  •0•0•0•0•Updated Nov 24, 2023Nov 24, 2023

• PowerShellForFOD

  Public archive
  PowerShell Module for Fortify on Demand

  PowerShell

  •

  GNU General Public License v3.0

  •2•1•0•0•Updated Nov 15, 2023Nov 15, 2023

• docker-sbom-scan

  Public
  Example GitHub Action workflow for generating an SBOM for a docker container and scanning it for vulnerabilities with Fortify

  GNU General Public License v3.0

  •0•0•0•0•Updated Oct 20, 2023Oct 20, 2023

• fortify-minikube-demo

  Public
  Example scripts for running Fortify in minikube cluster using Fortify helm charts

  PowerShell

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Sep 8, 2023Sep 8, 2023

• sample-cpp

  Public
  Fortify Sample C++ Demo

  PowerShell

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated May 4, 2023May 4, 2023

• EmailEightBall

  Public
  Updated Email version of Fortify EightBall demo app

  Java

  •1•0•0•0•Updated Apr 20, 2023Apr 20, 2023

• client-certificate-demo

  Public
  Demo for client/server certificate authentication using TLS (Mutual TLS)

  Java

  •

  Apache License 2.0

  •2•0•0•0•Updated Feb 13, 2023Feb 13, 2023

• ring2park-online

  Public
  Ring2Park Online Spring MVC/Webflow Reference Application

  Java

  •12•11•0•8•Updated Dec 16, 2022Dec 16, 2022

• IWAAngularUI

  Public
  Angular UI front end for IWA (Insecure Web App) Pharmacy Direct

  CSS

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Mar 4, 2022Mar 4, 2022

• FortifyAzureRMDemo

  Public
  Assets for demo of Fortify SCA vulnerability scanning of Azure Resource Manager templates

  Java

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Feb 17, 2022Feb 17, 2022