CODEWITHSUNDEEP
fortify
dnraikes
dnraikes

Reputation: 335

Fortify running a scan spanning several code repositories but generating a single report

I am working with a project that consists of several (3 or 4) git repositories. Each repository uses maven to build it.

I need to run fortify against all the repositories, but I want just a single fpr report containing the results for all the repositories not one per repository.

Is there a recommended way to do this? Note: there is no overarching pom.xml that builds the entire application just individual pom.xml files for each repository.

Any tips would be appreciated. We are using Fortify 16.11 on a Linux server.

Upvotes: 1

Views: 768

Answers (1)

SBurris
SBurris

Reputation: 7448

Translate all the repositories into the same build id (-b <build_id>).

Once they are all translated, run the -scan command on that <build_id>

Upvotes: 1

Related Questions