Details
-
Type:
Improvement
-
Status:
Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: Fortify
-
Labels:None
-
Number of attachments :
Description
It looks like multi-module is not supported by the Fortify Plugin for languages other than Java.
Indeed, here are some logs taken from the IssueSensor class, when executing the plugin on a C# solution (which is always by default multi-module). This is an excerpt of the log during the "FooProject" module analysis):
12:42:07 [INFO] [12:42:07.871] Sensor Fortify Issues... 12:42:58 [INFO] [12:42:58.438] - fileSystem.getBaseDir(): C:\Tests\MySolution\FooProject 12:42:58 [INFO] [12:42:58.438] - fileSystem.getSourceDirs(): 12:42:58 [INFO] [12:42:58.443] - C:\Tests\MySolution\FooProject 12:42:58 [INFO] [12:42:58.443] Loading 26 Fortify issues 12:42:58 [INFO] [12:42:58.445] - Issue for 'FooProject/MyClass.cs' => corresponding Sonar file: org.sonar.api.resources.File@1f10c35[key=FooProject/MyClass.cs,dir=FooProject,filename=Package.cs,language=<null>] 12:42:58 [INFO] [12:42:58.445] - ... 12:42:58 [INFO] [12:42:58.454] Sensor Fortify Issues done: 50583 ms
"FooProject/MyClass.cs" is what "issue.getFilePath()" returns. This means that Fortify gives path relative to the root project, which makes it impossible for now to retrieve the path relative the current module being analysed.