Current Behavior
Using source code and pipeline from IWA-NodeJS, added a vulnerability on a branch and committed. FoD scan proceeds correctly with new issue found and Aviator results, but when DO_AVIATOR_REMEDIATIONS: true we see a failure in the logs:
START: AVIATOR_REMEDIATIONS
2026-09-09T08:48:43.7495732Z Executing fcli fod action run "github-remediations-pr" "--rel=fortify-presales/IWA-NodeJS:demo/fortify-remediate" "--source-dir=/home/runner/work/IWA-NodeJS/IWA-NodeJS" "--progress=none"
2026-09-09T08:48:44.3886970Z FcliSimpleException: The last scan date was over 2 years ago and results are no longer available to be downloaded.
2026-09-09T08:48:44.3887905Z at com.fortify.cli.fod._common.scan.helper.FoDScanHelper.validateScanDate(FoDScanHelper.java:130)
2026-09-09T08:48:44.3889206Z FcliActionStepException: 'fcli fod aviator apply-remediations "--rel=fortify-presales/IWA-NodeJS:demo/fortify-remediate" "--source-dir=/home/runner/work/IWA-NodeJS/IWA-NodeJS" "--progress=none"' returned non-zero exit code 1
2026-09-09T08:48:44.3890573Z at com.fortify.cli.common.action.runner.processor.ActionStepProcessorRunFcli.onFcliFail(ActionStepProcessorRunFcli.java:169)
2026-09-09T08:48:44.3892340Z FcliActionStepException: 'fcli fod action run push-remediations "--source-dir=/home/runner/work/IWA-NodeJS/IWA-NodeJS" "--rel=fortify-presales/IWA-NodeJS:demo/fortify-remediate" "--branch-name=aviator/remediations/20260909-084843-000" "--progress=none"' returned non-zero exit code 1
2026-09-09T08:48:44.3894019Z at com.fortify.cli.common.action.runner.processor.ActionStepProcessorRunFcli.onFcliFail(ActionStepProcessorRunFcli.java:169)
2026-09-09T08:48:44.3894993Z FAILED: AVIATOR_REMEDIATIONS
If we try and re-run the scan we get #1023
Expected Behavior
It is expected that a new branch is created with the vulnerabilities fixed by aviator.
Steps To Reproduce
See DEMO.md in IWA-NodeJS for the scenario being used.
Environment
FoD
GitHub Actions
fortify/github-action@v3
Anything else?
No response
Current Behavior
Using source code and pipeline from IWA-NodeJS, added a vulnerability on a branch and committed. FoD scan proceeds correctly with new issue found and Aviator results, but when
DO_AVIATOR_REMEDIATIONS: truewe see a failure in the logs:If we try and re-run the scan we get #1023
Expected Behavior
It is expected that a new branch is created with the vulnerabilities fixed by aviator.
Steps To Reproduce
See
DEMO.mdin IWA-NodeJS for the scenario being used.Environment
Anything else?
No response