HPE Security Fortify Static Code Analyzer User Guide SCA 17.10

HPE_SCA_Guide_17.10

User Manual:

Open the PDF directly: View PDF .
Page Count: 138 [warning: Documents this large are best viewed by clicking the View PDF Link!]

Scroll down to view the document on your mobile browser.

Title Page
Contents
Preface
- Contacting HPE Security Fortify Support
- For More Information
- About the Documentation Set
Change Log
Chapter 1: Introduction
- HPE Security Fortify Static Code Analyzer
  - HPE Security Fortify CloudScan
  - HPE Security Fortify Scan Wizard
- About the Analyzers
- Related Documents
Chapter 2: Analysis Process Overview
- Analysis Process
- Translation Phase
- Mobile Build Sessions
- Analysis Phase
- Incremental Analysis
- Parallel Processing
- Translation and Analysis Phase Verification
Chapter 3: Translating Java Code
- Java Command-Line Syntax
  - Java Command-Line Options
  - Java Command-Line Examples
- Handling Resolution Warnings
  - Java Warnings
- Using FindBugs
- Translating Java EE Applications
- Translating Java Bytecode
Chapter 4: Translating .NET Code
- .NET Command-Line Syntax
  - .NET Command-Line Options
- Translating Simple .NET Applications
- Handling Translation Errors
  - .NET Translation Errors
  - ASP.NET Errors
Chapter 5: Translating C and C++ Code
- Prerequisites
- C and C++ Command-Line Syntax
- Scanning Pre-processed C and C++ Code
Chapter 6: Translating JavaScript Code
- Translating Pure JavaScript Projects
- Skipping Translation of JavaScript Library Files
- Translating JavaScript Projects with HTML Files
- Including External JavaScript or HTML in Translation
- Scanning JavaScript Code
Chapter 7: Translating Ruby Code
- Ruby Command-Line Syntax
  - Ruby Command-Line Options
- Adding Libraries
- Adding Gem Paths
Chapter 8: Translating ABAP Code
- About Scanning ABAP Code
  - INCLUDE Processing
- Importing the Transport Request
- Adding Fortify Static Code Analyzer to Your Favorites List
- Running the HPE Security Fortify ABAP Extractor
Chapter 9: Translating Code for Mobile Platforms
- Translating Apple iOS Projects
  - Prerequisites
  - Xcodebuild Integration Command-Line Syntax
- Translating Android Projects
Chapter 9: Translating Apex and Visualforce Code
- Prerequisites
- Apex and Visualforce Command-Line Syntax
- Apex and Visualforce Command-Line Options
Chapter 10: Translating Flex and ActionScript
- ActionScript Command-Line Syntax
  - Flex and ActionScript Command-Line Options
  - ActionScript Command-Line Examples
- Handling Resolution Warnings
  - ActionScript Warnings
Chapter 11: Translating COBOL Code
- Preparing COBOL Source Files for Translation
- COBOL Command-Line Syntax
- COBOL Command-Line Options
Chapter 12: Translating Other Languages
- Translating Python Code
  - Python Command-Line Options
- Translating ColdFusion Code
  - ColdFusion Command-Line Syntax
  - ColdFusion Command-Line Options
- Translating SQL
  - PL/SQL Command-Line Example
  - T-SQL Command-Line Example
- Translating ASP/VBScript Virtual Roots
- Classic ASP Command-Line Example
- VBScript Command-Line Example
- PHP Command-Line Example
Chapter 13: Integrating into a Build
- Build Integration
  - Make Example
  - Devenv Example
- Modifying a Build Script to Invoke Fortify Static Code Analyzer
- Touchless Build Integration
- Ant Integration
- Gradle Integration
- Maven Integration
- MSBuild Integration
  - Setting Windows Environment Variables for Touchless MSBuild Integration
  - Using the Touchless MSBuild Integration
Chapter 14: Command-Line Interface
- Output Options
- Translation Options
- Analysis Options
- Other Options
- Directives
- Specifying Files
Chapter 15: Command-Line Utilities
- Fortify Static Code Analyzer Utilities
  - Other Command-Line Utilities
- Checking the Fortify Static Code Analyzer Scan Status
  - SCAState Utility Command-Line Options
- Working with FPR Files from the Command Line
- Generating Reports from the Command Line
  - Generating a BIRT Report
  - Generating a Legacy Report
- About Updating Security Content
  - Updating Security Content
Chapter 16: Troubleshooting
- Exit Codes
- Using the Log File to Debug Problems
- Translation Failed Message
- JSP Translation Problems
- C/C++ Precompiled Header Files
- Reporting Issues and Requesting Enhancements
Appendix A: Parallel Analysis Mode
- Enabling Parallel Analysis Mode
Appendix B: Filtering the Analysis
- Filter Files
- Filter File Example
Appendix C: Scan Wizard
- Preparing to use the Scan Wizard
- Starting the Scan Wizard
  - Starting Scan Wizard on a System with Fortify SCA and Applications Installed
  - Starting Scan Wizard as a Stand-Alone Utility
Appendix D: Sample Files
- Basic Samples
- Advanced Samples
Appendix E: Configuration Options
- Fortify Static Code Analyzer Properties Files
  - Properties File Format
  - Precedence of Setting Properties
- fortify-sca.properties
- fortify-sca-quickscan.properties
Send Documentation Feedback

HPE Security Fortify Static Code Analyzer User Guide SCA 17.10

HPE_SCA_Guide_17.10

Navigation menu

Versions of this User Manual:

Views

Navigation