How do I generate a report that has all the issues?

fortify
Spike Spiegel picture Spike Spiegel · Oct 22, 2015 · Viewed 10.5k times · Source

I have a Fortify FPR scan file that I open in AWB. I want to generate a report that has all the instances of where the issues are found. When I generate a report it generates the report with the issues by type and their count and below the type I also get names and code snippets of some files where the issue was found. I want to generate s report which has names and code snippets from all files in which issues were found. Is there any way to do that?

Answer

Ed Griffin picture Ed Griffin · Oct 25, 2016

The template files can be found in Core/config/reports of your fortify directory.

Copy DeveloperWorkbook.xml to a new file AllIssues.xml and near <title>Results Outline</title> edit limit="5" to limit="-1".

Then run:

ReportGenerator -template AllIssues.xml -format pdf -f output.pdf -source input.fpr

Related questions

How does Fortify software work?

Fortify is a SCA used to find the security vulnerabilities in software code. I was just curious about how this software works internally. I know that you need to configure a set of rules against which the code will be …

Read More
How to fix "Path Manipulation Vulnerability" in some Java Code?

The below simple java code getting Fortify Path Manipulation error. Please help me to resolve this. I am struggling from long time. public class Test { public static void main(String[] args) { File file=new File(args[0]); } }

Read More
Fortify command line usage

Has anyone used command line to run fortify? I tryin to incorporate fortify run in my CI build and I dont know how to do it.

Read More