• How to separate options to sourceanalyzer from options to the build tool

    Is there a way to separate options to sourceanalyzer from options to the build tool? I am trying to run a Fortify scan on a Visual Studio project by using msbuild. However, the msbuild that is provided by the build infrastructure team only accepts options…
  • FPR upload to SCC and download from SCC timeout problem

    Hi For only one project I have a problem (bellow error datails) I cant upload to SSC via Audit workbenck or Azure pipeline job and with after login SCC with Auditworkbenck I can not dowload and access the project. But before I could upload and I can…
  • Scan time differs for same count of files

    Hi, I have executed two different scans .. One scan has 14000 files and the scan completed in a day. But the other scan which has 11000 files , only the the translation phase took 1 day. Why does this happen? Is there any specific reason? Please…
  • Fortify SCA backup

    Hi, Is there a way to take a backup of the Fortify SCA? As we have all configurations and rulepacks in place in production , I want to take a backup and replicate the same in my stage. I was able to install the sca but I found I need to configure…
  • Alternate for Fortify sca incremental analysis

    Hi, We have a large code base where we run the fortify scans on a monthly basis. But, every month the changes happen in the code base is less than 10% but we are scanning the full code base. I found that Fortify incremental scan feature has been…
  • Significance of -Dcom.fortify.sca.fileextensions.sql=TSQL while scanning .sql files

    While trying to execute a fortify scan for a directory , the translation phase has been failing due to sql files. I then tried using one of the parameters -Dcom.fortify.sca.fileextensions.sql=PLSQL and -Dcom.fortify.sca.fileextensions.sql=TSQL The…
  • Changing The IP address of Fortify Machines

    H ello Dears, I hope everything is well . I have a quick question for SCA and SSC and webinspect . I already installed them in a different Azure cloud instance I also installed and configured the scan central controller and sensor. after I finished the…
  • Fortify SCA and Apps Patch 22.2.1 (Windows)

    I'm planning our update from 21.2 to 22.2 and I see 2 patches with the same date for " Fortify SCA and Apps Patch 22.2.1 (Windows)". Do I need both? My understanding is that the patch is a complete install of the product.
  • Fortify SCA Upload to SSC

    Hello Everyone, I'm trying to implement Fortify SCA on a server with Jenkins plugins to run a SAST scan and upload the result to another server SSC after installing SSC over HTTPS when I configure the system and testing the connection to the SSC connection…
  • how to install ssc sensor in Ubuntu Server (most priority )

    how to install ssc sensor in Ubuntu Server ? I Have checked with Installation & Configuration Guide they mentioned proper details for only windows for Linux and Ubuntu Server there is not Proper Installation & Configuration Guide so please…
  • Bug in VS Code plugin

    Hi, The plugin for Visual Studio Code has a problem, when we add parameters in the translation phase, the parameters are triggered in the scan phase. Example: I entered the -verbose parameter in the translation and scan options box and the command…
  • Can I SCA SAP-ABAP language?

    I have never heard before this languag. Can I use scan wizard tools this language project? If it possible, which version of SCA supports this feature? please help me. thank you for your answer~.
  • Problem with server certificate: unable to find valid certification path to requested target

    when I upgraded SCA to version 21.2.2 I got an error: i used the same certificate with old version the network is fine:
  • Need support or understand if fortify can be used for Power Apps or Microsoft Power Platform.

    I need help here. If Fortify Tool does support to Power Apps (Microsoft Power Platform). I am Unable to proceed with fortify tool scan for Power Apps. Kindly help me. Thanks In Advance. Naim
  • Fortify sourceanalyzer on Mac not recognized as a command

    Hi everyone, Recently I have installed Fortify 20.1.0 on Mac OS Big Sur, everything went ok, but Audit Workbench doesn't seem to scan Swift Projects, not even with the advanced scan option. So I've been trying to analyze a Swift project with the command…
  • SCA Linux text Installation error "RPM-building tools are not available on the system" - CentOS 7.9

    Install seems fine otherwise - I suspect there's some binary naming difference between RHEL and CentOS which I could likely shim or alias. I've edited out all the lines about directory creation and unpacking. Log started 05/19/2021 at 03:13:59 Preferred…
  • Fortify SCA - How To Tell If A Scan Is Valid.mp4

    This is a video on different places to look in a Fortify Scan (.fpr) and Audit Workbench to tell if you have a good Fortify SCA scan. https://www.youtube.com/watch?v=5D_gWPa_Ayk (new address 2021) Recorded by Fortify PS - Stephen Burris
  • Fortify SCA - Auditing Fundamentals v2 using AWB.mp4

    This video shows the basics on performing Fortify SCA auditing within the Audit Workbench tool. https://www.youtube.com/watch?v=UasTZMmSQOc&t=2s
  • Running SCA Scan using Visual Studio Plugin

    Steps on how to run a SCA scan using Visual Studio Plugin. https://www.youtube.com/watch?v=6KntWKE71Ik
  • Running SCA Scan Using AWB

    Steps on how to run a SCA scan using AWB. https://www.youtube.com/watch?v=UasTZMmSQOc
  • Uninstalling SCA Eclipse Plugin

    Steps on how to uninstall SCA Eclipse plugin. https://www.youtube.com/watch?v=fODrvIHpzyM
  • Download SCA Rulepacks

    Steps on how to download SCA Rulepacks. https://www.youtube.com/watch?v=xySsfIF6WeE
  • Installing SCA IntelliJ Plugin

    Steps on how to install SCA IntelliJ Plugin. https://www.youtube.com/watch?v=jfHCJjUa9P0
  • Installing SCA Maven Plugin

    Steps on how to install SCA Maven Plugin. https://www.youtube.com/watch?v=ksWa0ufyorM
  • Installing SCA Visual Studio Plugin

    Steps on how to install SCA Visual Studio plugin. https://www.youtube.com/watch?v=HGqZSBvnmLQ