Synopsis

fcli aviator ssc apply-remediations [--av=<appVersionNameOrId>] [--delim=<delimiter>] [--progress=<type>] [--since=<since>] [--source-dir=<sourceCodeDirectory>] [--source-encodings=encoding[, encoding…​]]…​ [[-h] [--env-prefix=<prefix>] [--log-file=<logFile>] [--log-level=<logLevel>] [--log-mask=<level>] [--debug]] [[--ssc-session=<sessionName>]] [[-o=<type+args>] [--style*=<style>,…​]…​ ] [--to-file=<outputFile>_]] (--artifact-id=<artifactId> | --latest | --all)

Description

Downloads FPR artifact(s) and applies Fortify Remediation Aviator-generated remediations to the specified source directory. Exactly one of --artifact-id, --latest, or --all must be specified. This command requires an active user session. Use 'fcli aviator session login' to create a session.

Examples:

Apply remediations from a known artifact by ID:
  fcli aviator ssc apply-remediations --artifact-id 12345
Apply remediations from the latest Fortify Remediation Aviator-processed artifact for an application version:
  fcli aviator ssc apply-remediations --av "MyApp:1.0" --latest
Apply remediations from the latest artifact, restricting to those uploaded in the last 7 days:
  fcli aviator ssc apply-remediations --av "MyApp:1.0" --latest --since 7d
Apply remediations across all Fortify Remediation Aviator-processed artifacts for an application version:
  fcli aviator ssc apply-remediations --av "MyApp:1.0" --all
Apply remediations across all artifacts uploaded in the last 2 weeks:
  fcli aviator ssc apply-remediations --av "MyApp:1.0" --all --since 2w
Apply remediations from the latest artifact using a custom source directory:
  fcli aviator ssc apply-remediations --av "MyApp:1.0" --latest --source-dir /path/to/src

Options

--all

Apply remediations from all Fortify Remediation Aviator-processed artifacts for the given application version, in chronological order. Aggregates remediation statistics across all artifacts. Requires --av/--appversion. Mutually exclusive with --artifact-id and --latest.

--artifact-id=<artifactId>

Specific artifact ID to process. Mutually exclusive with --latest and --all.

--av, --appversion=<appVersionNameOrId>

Application version id or <application>:<version> name.

--delim=<delimiter>

Change the default delimiter character when using options that accept "application:version" as an argument or parameter.

--latest

Automatically select the most recent Fortify Remediation Aviator-processed artifact. Requires --av/--appversion. Mutually exclusive with --artifact-id and --all.

--progress=<type>

Configure progress output. Allowed values: auto, none, simple, stderr, single-line, ansi. Default value: auto. Proper output of single-line and ansi depends on console capabilities.

--since=<since>

Filter artifacts by upload date. Supports relative durations (e.g. 7d, 2w, 1M, 90d) or absolute dates (e.g. 2025-01-01, 2025-01-01T10:30:00, 2025-01-01T10:30:00Z). Can only be used with --latest or --all; not compatible with --artifact-id.

--source-dir=<sourceCodeDirectory>

Source code directory where remediations will be applied. Defaults to current directory.

--source-encodings=encoding[,encoding…​]

Comma-separated source encoding candidates to try in order when decoding source files. Use FPR to try the source encoding recorded in audit.fvdl. When writing remediated files, the accepted encoding is used. Default value: FPR,UTF-8,ISO-8859-1.

SSC session name options

--ssc-session=<sessionName>

Name of the SSC session to use for executing this command. Default value: default.

Output options (also see documentation link below)

-o, --output=<type+args>

Select output type (csv, table, expr, json, xml, yaml) and optional type arguments.

--store=<var>[:<prop>]

Store JSON results in an fcli variable for later reference.

*--style*=<style>,…​

Select output style: header, no-header, pretty, no-pretty, flat, no-flat, array, single, border, no-border, md-border, wrap, no-wrap, fast-output, no-fast-output, envelope, no-envelope.

--to-file=<outputFile>

Write output to the specified file.

Generic fcli options (also see documentation link below)

--debug

Enable collection of debug logs.

--env-prefix=<prefix>

Prefix for resolving default option values. Default value: FCLI_DEFAULT.

-h, --help

Use 'fcli [command] -h' to display help for fcli (sub-)commands.

--log-file=<logFile>

Write log output to file. Default: ./fcli.log if logging is enabled.

--log-level=<logLevel>

Set logging level: TRACE, DEBUG, INFO, WARN, ERROR, NONE.

--log-mask=<level>

Log mask level: high, medium, low, none. Default: medium. Masking is done on a best-effort basis; no guarantee that all sensitive data will be masked.