Fortify file (.fpr file) to PDF convertion

code-coverage fortify
user1859565 picture user1859565 · Jun 20, 2016 · Viewed 18.1k times · Source

Basically I am trying to generate the PDF file from the Fortify report file which is in .fpr formate.

Can any one suggest me some utility tool which can be accessed by the .bat file.

I am trying to execute the following command :

i.e,.. ReportGenerator -format pdf -f MyProject.pdf -source MyProject.fpr

Can anyone help me to generate the PDF file from the .fpr file??

Thanks in advance.

Answer

SBurris picture SBurris · Jun 20, 2016

There is a command-line utility to generate an Report from the FPR file.

Currently there are two report generators: Legacy and BIRT. The BIRT report engine was introduced into Audit Workbench with version 4.40.

Here is an example using the BIRT Report engine to generate a DISA STIG report

BIRTReportGenerator -template "DISA STIG" -source HelloWorld_second.fpr 
-output BirtReport.pdf -format PDF -showSuppressed --Version "DISA STIG 3.9" 
-UseFortifyPriorityOrder

The different versions are specified in the SCA Users Guide.

Using the legacy one is a little more involved. The command is:

ReportGenerator -format pdf -f LegacyReport.pdf -source HelloWorld_second.fpr 
-template DisaStig3.10.xml -showSuppressed -showHidden

You can either use one of the predefined template reports located in the /Core/config/reports directory or generate one using the Report Wizard and saving the template which gets stored in the C:\Users\<USER>\AppData\Local\Fortify\config\AWB-XX.XX\reports\ directory in Windows.

On Linux/Mac look at the configuration file <SCA Install Dir>/Core/config/fortify.properties for the com.fortify.WorkingDirectory property, this is where the reports will be stored

Related questions

What is a reasonable code coverage % for unit tests (and why)?

If you were to mandate a minimum percentage code-coverage for unit tests, perhaps even as a requirement for committing to a repository, what would it be? Please explain how you arrived at your answer (since if all you did was …

Read More
Clearing coverage highlighting in Eclipse

After running coverage reports in Eclipse (using cobertura or an EMMA plugin), my source code files get highlighted in green, red and yellow depending on which lines of code were covered by tests. How can I clear this highlighting after …

Read More
What is code coverage and how do YOU measure it?

What is code coverage and how do YOU measure it? I was asked this question regarding our automating testing code coverage. It seems to be that, outside of automated tools, it is more art than science. Are there any real-world …

Read More