VSTS plugin, no email detected for cloud controller

[hewhocodes]

I'm attempting to use the Fortify plugin for VSTS, https://marketplace.visualstudio.com/items?itemName=fortifyvsts.hpe-security-fortify-vsts

Fortify has successfully been setup for our build and cloud also works for automated scans and uploads to SSC.

However, we would also like to be able to use the email functionality build into the cloud controller software.  Unfortunately adding -email <user_email@domain.com> to the Addition Scan Parameters section does not appear to work.

It looks like the email address gets appeneded after the -scan parameter and the following messages is displayed: "no email detected"

The reason we would like email integration is because the cloud controller provides automated alerts regarding the scan status (queued, completed, failed, etc).  It also provides the link to download the results if successful.

Is there a work around for getting cloud scan email integration with VSTS, or is there a plan for an update as this is a useful feature.

[HansEnders]

That field for "Additional Scan Parameters" refers to options available with SCA such as {-mt} or {-show-files}.  The SCA scanner does not have a {-email} parameter.  For your reference, I have attached a recent listing from SCA 17.20.  The prior radio buttons attempt to make it a little simpler for the user, as enabling them will include the parameters for Clean {-clean}, {-logfile <filename>}, Verbose Output {-verbose}, and Debug Information {-debug}.

I believe that to get an alert, you will have to formulate more than this option.  Your Build Task in VSTS might have an option for this, so you could create your own triggers and notifications script.  The SSC Server offers Alerts via email, so when your VSTS/SCA scan is uploaded those could be triggered.  Fortify CloudScan offers email alerts as well, but they notify SSC to send them and they only complete if the associated SSC Server has that feature enabled and configured.