Added fortify-scan.sh

Author: rsenden

.gitignore

@@ -13,3 +13,4 @@ rebel.xml
 .settings/
 bin/
 lombok.config
+*.fpr

build.gradle

@@ -14,6 +14,7 @@ ext {
 apply from: "${gradleHelpersLocation}/repo-helper.gradle"
 apply from: "${gradleHelpersLocation}/junit-helper.gradle"
 apply from: "${gradleHelpersLocation}/version-helper.gradle"
+apply from: "${gradleHelpersLocation}/fortify-helper.gradle"
 
 // Project and plugin version based on SCM information
 version = getProjectVersionAsBetaOrRelease(true)

fortify-scan.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+# Set scan options
+# Modular scan doesn't work properly yet, so for now we just add the fortify-ssc-parser-util build model
+# Note that either approach requires fortify-ssc-parser-util to be translated/scanned on the same machine
+# before running this script.
+#scanOpts="-include-modules fortify-ssc-parser-util -scan"
+scanOpts="-b fortify-ssc-parser-util -scan" 
+
+# Load and execute actual scan script from GitHub
+curl -s https://raw.githubusercontent.com/fortify-ps/gradle-helpers/1.0/fortify-scan.sh | bash -s - ${scanOpts}