fortify - Fortify Audit Workbench add a comment under Issue summary using command line

Question

Fortify seems to have some good command line support to scan and generate a report. Although the utilities do not seem to include an option to add a comment under Issue summary for a particular issue using command line.

Was wondering if there is an option for that and I am just missing seeing it. We audit a bunch of files on a regular basis and it would be quite handy to be able to add comments to a particular issue in a FPR using command line.

标签： fortifyfortify-source

Answer 1

这是不可能的。您可以将 FPRUtility 用于很多事情，请查看下面的 SCA 指南。要向 FPR 文件添加注释，您可以使用 Audit Workbench。

https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/1820/SCA_Guide_18.20.pdf