CODEWITHSUNDEEP
visual-studiofortify
Tara Singh
Tara Singh

Reputation: 1841

Is Visual Studio required to run Fortify on .net sources?

Is Visual Studio required to be installed on the machine if I want to run Fortify (from command line) on .net sources? I am trying to run fortify from command line but its always complaining about Build Id does not exist.

Thanks, Tara Singh

Upvotes: 5

Views: 4366

Answers (3)

Riju
Riju

Reputation: 576

Michael Hidalgo talk about this in his blog post dated Sep 2,2013 http://blog.michaelhidalgo.info/2013/09/configuring-ildasmexe-in-hp-fortify.html

Configuring ILDASM.exe in HP Fortify (when Visual Studio .Net is not installed)

I was trying to use HP fortify to scan a ASP.NET Web application, but I realized that I did not have Visual Studio or the Windows SDK.

HP Fortify requires ildasm.exe to perform the scan. Due the fact I was not able to do a full installation of Visual Studio .Net because of disk space, I just installed Windows SDK, which will also install ildasm.

Once installed, the problem still remains. HP fortify will try to locate ildasm.exe in a default path (which I was not able to figure out what was). Fortunately, using HP Fortify you can specify the path of ildasm.exe.

We need to locate the fortify-sca.properties (which is a kind of configuration file). This file can be found in the following path C:\Program Files\HP_Fortify\HP_Fortify_SCA_and_Apps_3.90\Core\config.

A new key is required com.fortify.sca.IldasmPath

This is the path where ildasm.exe resides in my current installation:

C:\Program Files (x86)\Microsoft SDKs\Windows\v7.0A\Bin\ildasm.exe

Note that we need to scape the backslash (\). enter image description here

Upvotes: 0

flee
flee

Reputation: 56

Tara, SCA for .NET requires the .NET compiler for translation purposes. You can download the SDK which includes the compilers and the core DLLs from Microsoft for free.

Can you include the commands you issued?

Upvotes: 2

Jason
Jason

Reputation: 193

See this link: Fortify throws error while scanning Visual Studio project

Not sure if this is a solution to your issue.

Taken from Fortify Support Website:

  • Web Support

Receive Web Support by logging into Fortify Self-Service. Here you can:

  • Submit a New Ticket
  • Manage Existing Tickets
  • Search the Knowledge Base
  • Email Support

Contact Fortify Technical Support by email at [email protected].

Upvotes: 0

Related Questions