Skip to content

Releases: fortify/fcli

v3.13

07 Nov 11:42
2752924

Choose a tag to compare

Semantic version release for v3.13.1

v3.13.0

31 Oct 13:34
e43deb8

Choose a tag to compare

3.13.0 (2025-10-31)

Features

  • fcli license ncd-report: Add support for Azure DevOps (see #299) (bb0b9b9)
  • fcli ssc appversion create: If there's only a single issue template marked as 'in use', this template will now be considered as the default template if no default template is explicitly configured in SSC (1a865d7)
  • Add bulkaudit SSC action for automated SAST Aviator batch auditing of SSC application versions (2b9391d)
  • FoD ci action: Add support for new scan-agnostic DO_WAIT environment variable & deprecate DO_SAST_WAIT (b87ac3b)
  • SSC ci action: Add support for new scan-agnostic DO_WAIT environment variable & deprecate DO_SAST_WAIT (b87ac3b)
  • SSC ci action: Incorporate debricked-scan action to allow for running both SAST & Debricked SCA scan (b87ac3b)
  • SSC debricked-scan action: New action for running a Debricked scan and importing results to SSC (b87ac3b)

Bug Fixes

  • fcli aviator * apply-remediations: Fix InvalidPathException for quoted paths (848b97e)
  • fcli aviator ssc audit: Automatically refresh SSC metrics if necessary before auditing (2b9391d)
  • fcli fod session login: Ignore --tenant when authenticating with client credentials (7014b3c)

v3.12.0

27 Oct 13:00
fd1f869

Choose a tag to compare

3.12.0 (2025-10-27)

Features

  • fcli util all-commands list: Include list of full command aliases (fe00faa)

Bug Fixes

  • fcli * action help ci: Fix table layout (00f09a2)
  • Action development guide: Add missing sample snippets (ad24754)
  • Action development guide: Fix indentation in sample snippets (543037a)
  • Action development guide: Fix typo in cli.option sample snippet (543037a)
  • Action development guide: Various other minor improvements (543037a)
  • Action framework: Fix stdout output being suppressed in run.fcli::records.for-each steps, affecting for example fcli ssc action run servicenow-csv-report -f stdout (d88d47f)
  • Fix color output on Windows (jar/exe) (f2712f8)
  • Fix table output on Linux native binary (d32d98b)
  • Fix various code quality issues, like potentially unreleased resources, null pointer references, ... (24a3ca7)

v3.12

27 Oct 13:29
fd1f869

Choose a tag to compare

Semantic version release for v3.12.0

Development Release - try/jline-ansi branch

23 Oct 17:13

Choose a tag to compare

See Assets section below for latest build artifacts

v3.11.0

21 Oct 13:15
a8a54e4

Choose a tag to compare

3.11.0 (2025-10-21)

Features

  • --style option: Add (no-)fast-output support to enable faster table output by sampling first 100 records to determine column width (b1e5659)
  • --style option: Add (no-)wrap support to control text wrapping in table cells (b1e5659)
  • ci action: Detect data from local Git repository (a52f0ef)
  • fcli fod issue ls: Add --app option to allow for listing issues at application level (closes #596) (f9454b1)
  • fcli ssc issue list: Add (queryable) folderName property in output (2212093)
  • fcli ssc rest call: Add /api/v1 prefix if missing, to support same endpoint format as listed in the SSC REST API reference in recent SSC versions (c6dd23b)
  • Action schema: Add #ifBlank SpEL function (a52f0ef)
  • Action schema: Add #localRepo SpEL function for obtaining local repository metadata (bfeee2e)
  • Add fcli fod attribute commands for managing FoD attributes (resolves #679) (3157d64)

Bug Fixes

  • ci action: Improve Azure DevOps detection logic (a52f0ef)
  • fcli aviator ssc prepare: Fix exception in fcli native binaries (fixes #830) (cbbdc2e)
  • fcli aviator: Fix bugs in FPR source processing and remediation generation (#833) (9512d78)
  • fcli fod issue ls: Some fixed issues were not properly annotated with (F) (fixes #820) (f9454b1)
  • fcli fod session login: Fix NullPointerException if protocol is missing in FoD URL (fixes #827) (244bd94)
  • fcli ssc session login: Improve exception if protocol is missing in SSC or SC-SAST Controller URL (8e89bd8)
  • Compile native binaries in CPU compatibility mode to allow them to run on more CPU architectures (0217b8f)
  • Improve table output (f18f2f0)

v3.11

21 Oct 13:34
a8a54e4

Choose a tag to compare

Semantic version release for v3.11.0

v3.10.0

09 Oct 22:21
aa37948

Choose a tag to compare

3.10.0 (2025-10-09)

Features

  • fcli aviator app: Show quota in output of the create, get, list, and update commands (4fd5756)
  • fcli aviator ssc audit: Add --filterset, --no-filterset, and --folder options to allow for selecting issues to be audited (4fd5756)
  • Add fcli aviator fod apply-remediations command to apply Aviator-proposed remediations from an audited FPR file in FoD to a local source code directory (4fd5756)
  • Add fcli aviator ssc apply-remediations command to apply Aviator-proposed remediations from an audited FPR file in SSC to a local source code directory (4fd5756)
  • Add fcli aviator ssc prepare command to configure Aviator custom tags on SSC issue templates and application versions (4fd5756)
  • Add fcli fod action run gitlab-debricked-report (#818) (2175af6)

Bug Fixes

  • fcli aviator ssc audit: Add preflight check for auditable issues (4fd5756)
  • fcli aviator ssc audit: Improve FPR handling with Zip File System Provider integration and proper resource cleanup (4fd5756)
  • fcli aviator ssc audit: Improve FPR parsing speed and memory efficiency (4fd5756)
  • fcli aviator ssc audit: Improve FPR validation for FPRs with DAST-only issues (4fd5756)
  • fcli aviator ssc audit: Prevent race condition crash by checking executor state before retrying gRPC stream (#819) (646a963)
  • fcli util mcp-server start: Some common actions were exposed as MCP tools on modules that don't support actions through the CLI (fa49f97)

v3.10

09 Oct 22:44
aa37948

Choose a tag to compare

Semantic version release for v3.10.0

v3.9.1

02 Oct 15:23
8995d33

Choose a tag to compare

3.9.1 (2025-10-02)

Bug Fixes

  • fcli aviator ssc audit: Improve cleanup of temporary files (6175f54)
  • fcli aviator ssc audit: Resolve file token leak during Aviator artifact uploads, to avoid SSC errors due to reaching maximum number of allowed file tokens (6d2e28c)
  • fcli ssc: Reduce bulk request batch size to prevent potential networking timeouts due to SSC taking too long to process large bulk requests (eae7948)
  • fcli util mcp-server start: Improve usage help (d4225ce)
  • Improve progress message handling (9af8e67)