Fortify Scan - Static Code Analyzer

https://software.microfocus.com/en-us/products/application-security-testing/overview

https://software.microfocus.com/en-us/products/static-code-analysis-sast/overview

 

https://marketplace.microfocus.com/fortify/content/fortify-cloudscan-jenkins-plugin

https://wiki.jenkins.io/display/JENKINS/Fortify+CloudScan+Plugin

 

https://pivotal.io/security/cve-2018-1270

https://pivotal.io/security/cve-2018-1274

 

https://stackoverflow.com/questions/47856261/fortify-scan-spring-annotation-issue-deserializing-user-controlled-object-st