文档介绍：Fortify Source Code Analysis Suite scan guide
上海码德信息技有限公司
主讲人:陈安明
主题
Fortify SCA 组件
Fortify SCA源代码分析过程
SCA扫描命令解释
SCA转换源代码
SCA扫描项目实验.
Fortify SCA组件
源代码分析过程
阶段一:源代码内部格式转换阶段
阶段二:分析引擎分析阶段
sourceanalyzer -b <build-id> -clean
sourceanalyzer -b <build-id> ...
sourceanalyzer -b <build-id> -scan -f
SCA扫描命令解释
查看SCA扫描命令及参数-> sourceanalyzer –helpe
SCA转换源代码
转换 Java 代码
Java 命令行语法
Java命令行语法Examples
转换 J2EE Applications
使用 FindBugs
源代码
. NET Versions and
Visual Studio .NET Version 2003
Visual Studio .NET version 2005
转换 C/C++ 代码
转换PL/SQL/TSQL
转换 ColdFusion 代码
转换 Java 代码
Java 命令行语法
Java 命令行Examples
转换J2EE Applications
使用 FindBugs
Java 命令行语法
JAVA: sourceanalyzer -b <build-id> -cp <classpath> <file-list>
sourceanalyzer -b <buildid> javac <compiler opts> <files>
Java 命令行Examples
To translate a single file named with on the classpath, enter:
sourceanalyzer -b MyServlet -cp lib/
To translate all .java files in the src directory using all jar files in the lib directory as a classpath:
sourceanalyzer -b MyProject -cp "lib/*.jar" "src/**/*.java"
To translate the file while running the piler:
sourceanalyzer -b mybuild javac -classpath
piler Adapter
Fortify piler Adaper,使用它可以集成Java代码转换和Ant Task,可以从命令行直接使用Ant :
The sourceanalyzer executable must be on the system PATH.
(located in Core/lib) must be on ant's classpath.
The piler property must be set ..
The property must be set to the build ID
ant -piler=""
-=mybuildid
-lib <install-dir>/Core/lib/