![]() In reality, both instance IDs identify the same issue. Perform Force Instance ID migration on uploadĪ newer version of Fortify Static Code Analyzer or a Rulepack can change an instance ID from one created in a previous scan by an older version of Fortify Static Code Analyzer (or a Rulepack). If the count differs by more than ten percent, management approval is required before the scan can be uploaded. Require approval if file count differs by more than 10%įortify Software Security Center compares the file count for the scan and the scan that preceded it. ![]() If the external metadata version for the FPR file is earlier (lower) than, or the same as, the external metadata file version on the server, then Fortify Software Security Center allows the FPR file upload. If the external metadata version for the FPR file is later (higher) than the external metadata file version on the server, Fortify Software Security Center requires approval for the file upload. If a user attempts to upload an FPR file, Fortify Software Security Center compares the external metadata version for the file with the external metadata version on the Fortify Software Security Center server. file versions in scan against versions on server Fortify security content includes external metadata. If the Build Projects differ, management approval is required before the scan can be uploaded.Ĭheck external metadata External metadata includes mappings from the Fortify categories to alternative categories (such as OWASP Top 10, PCI, and CWE). Require approval if the Build Project is different between scansįortify Software Security Center compares the Build Project for the scan and the scan that preceded it. The processing rules are described in the following table. Select or clear the check boxes for the processing rule you want to apply to the application version. Select the PROCESSING RULES tab, and then review the listed processing rules. The APPLICATION PROFILE - dialog box opens. ![]() On the application version toolbar, click PROFILE. The AUDIT page for the application version opens. Log in to Fortify Software Security Center as an administrator, and then, on the Dashboard, click the link for the application version for which you want to configure the processing rules for analysis results. An application includes one or more application versions that users create and configure. When you work with a new codebase, the application and first application version are automatically created. The top-level container for one or more application versions. To configure the analysis results processing rules for an application A customer codebase evaluated by Fortify software.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |