v3.0.0

3.0.0 (2026-02-24)

⚠ BREAKING CHANGES

• fortify/github-action/setup: Now uses @fortify/setup NPM component instead of GitHub-specific implementation, resulting in changes to supported action inputs and environment variables
• fortify/github-action: Now uses fcli action run ci instead of GitHub-specific scripts, resulting in changes to supported action inputs and environment variables
• fortify/github-action/*: All sub-actions except for the setup action have been removed; use the top-level fortify/github-action to run a full AST scan pipeline, or use the setup action in combination with fcli commands or actions to implement custom workflows

Features

• fortify/github-action/*: All sub-actions except for the setup action have been removed; use the top-level fortify/github-action to run a full AST scan pipeline, or use the setup action in combination with fcli commands or actions to implement custom workflows (899cd9b)
• fortify/github-action/setup: Now uses @fortify/setup NPM component instead of GitHub-specific implementation, resulting in changes to supported action inputs and environment variables (899cd9b)
• fortify/github-action: Now uses fcli action run ci instead of GitHub-specific scripts, resulting in changes to supported action inputs and environment variables (899cd9b)

v2.2.0

2.2.0 (2025-11-19)

Features

• Update fcli to 3.13.1 (603d05a)
• Update ScanCentral Client to 25.4.0 (603d05a)

v2.1.1

2.1.1 (2025-06-14)

Bug Fixes

• Fix potential source file path inconsistencies in SAST security report (see fortify/fcli#749) (cc61a88)

v2.1.0

2.1.0 (2025-06-14)

Features

• Update fcli to 3.6.0 (4822149)
• Update ScanCentral Client to 25.2.0 (4822149)

Bug Fixes

• Documentation: Update action references to v2 (4822149)

v2.0.0

2.0.0 (2025-05-01)

⚠ BREAKING CHANGES

• Upgrade fcli to v3.4.1
• Removed SC_SAST_LOGIN_EXTRA_OPTS
• EXTRA_SC_SAST_SCAN_OPTS may need to be updated according to new fcli sc-sast scan start syntax
• Any custom fcli actions referenced in *_ACTION inputs will need to be migrated to fcli 3.x action syntax

Features

• EXTRA_SC_SAST_SCAN_OPTS may need to be updated according to new fcli sc-sast scan start syntax (63455f2)
• SC_SAST_SENSOR_VERSION is now optional (63455f2)
• Any custom fcli actions referenced in *_ACTION inputs will need to be migrated to fcli 3.x action syntax (63455f2)
• Removed SC_SAST_LOGIN_EXTRA_OPTS (63455f2)
• Upgrade fcli to v3.4.1 (63455f2)

Bug Fixes

• Upgrade Debricked CLI to v2.6.7 (63455f2)

v1.7.0

1.7.0 (2025-01-21)

Features

• Update Debricked CLI 2.5.1->2.6.4 (222ec90)
• Update fcli 2.11.1->2.12.2 (222ec90)

Bug Fixes

• Update ScanCentral Client 24.4.0->24.4.1 (222ec90)

v1.6.4

1.6.4 (2025-01-14)

Bug Fixes

• Add DO_PACKAGE_DEBUG setting to enable debug logging and publish package.zip & logs as job artifacts (29b093c)

v1.6.3

1.6.3 (2024-12-11)

Bug Fixes

• DO_PR_COMMENT: Use GITHUB_API_URL environment variable instead of hardcoded api.github.com to avoid failure on GitHub Enterprise (a804808)

v1.6.2

1.6.2 (2024-11-21)

Bug Fixes

• Minor documentation fix (434e78d)

v1.6.1

1.6.1 (2024-11-21)

Bug Fixes

• Configure static scan on DO_SETUP if needed (9d54346)
• Improve FoD SETUP_EXTRA_OPTS documentation (9d54346)
• Update Debricked CLI to 2.4.0 (9d54346)
• Update fcli to 2.1.0 (9d54346)