Fortify Error : "No rules file found"

java fortify
blue-sky picture blue-sky · Aug 13, 2013 · Viewed 15.7k times · Source

When I run a Fortify analysis against a Java project I receive this error : 

[warning]: No rules files found
[error]: No rules files found

Where can I configure the rules file ?

Answer

bvamos picture bvamos · Aug 30, 2013

The folder \Core\config\rules contains the rules files which can be dowloaded from update.fortify.com by invoking the command (on Windows):

bin\fortifyupdate.cmd

Related questions

log forging fortify fix

I am using Fortify SCA to find the security issues in my application (as a university homework). I have encountered some 'Log Forging' issues which I am not able to get rid off. Basically, I log some values that come …

Read More
Can't resolve Log Forging Fortify issue

I am having trouble fixing a Log Forging issue in Fortify. The issue, "writes unvalidated user input to the log", is being raised from both of the logging calls in the getLongFromTimestamp() method. public long getLongFromTimestamp(final String value) { LOGGER.…

Read More
Fortify integration with Maven - install

I want to run a Fortify scan against a Maven Eclipse project. Where should I start? I understand that I need to update my pom.xml file to include the Fortify plugin however do I also require to have Fortify …

Read More