fortify-rules.properties

This topic describes the properties available for use in the fortify-rules.properties file. Use these properties to modify behavior of individual rules or provide information that can improve how rules identify weaknesses.

Property Name Description

com.fortify.sca.rules.
password_regex.global

The regular expression to match password identifiers across all languages unless a language-specific rules property is set.

Value Type: String

Default: (?i)(s|_)?(user|usr|member|admin|guest|login|default|
new|current|old|client|server|proxy|sqlserver|
my|mysql|mongo|mongodb|db|database|ldap|smtp|
email|email(_)?smtp)?(_|\.)?pass(wd|word|phrase)

com.fortify.sca.rules
.password_regex.abap

Regular expression to match password identifiers in ABAP code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.actionscript

Regular expression to match password identifiers in ActionScript code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.cfml

Regular expression to match password identifiers in ColdFusion (CFML) code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.cobol

Regular expression to match password identifiers in COBOL code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.config

Regular expression to match password identifiers in XML. Setting this property overrides the global regex password rules property. Do not use regular expression modifiers. The value is case-insensitive.

Value Type: String

Default: (s|_)?(user|usr|member|admin|guest|login|default|
new|current|old|client|server|proxy|sqlserver|
my|mysql|mongo|mongodb|db|database|ldap|smtp|
email|email(_)?smtp)?(_|\.)?pass(wd|word|phrase)

com.fortify.sca.rules.
password_regex.cpp

Regular expression to match password identifiers in C and C++ code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.dotnet

Regular expression to match password identifiers in .NET code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.docker

Regular expression to match password identifiers in Dockerfiles. Setting this property overrides the global regex password rules property.

Value Type: String

Default: .*pass(wd|word|phrase).*

com.fortify.sca.rules.
password_regex.golang

Regular expression to match password identifiers in Go code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.java

Regular expression to match password identifiers in Java code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.javascript

Regular expression to match password identifiers in JavaScript and TypeScript code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.json

Regular expression to match password identifiers in JSON. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (?i).*pass(wd|word|phrase).*

com.fortify.sca.rules.
password_regex.jsp

Regular expression used to match password identifiers in JSP code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.objc

Regular expression to match password identifiers in Objective-C and Objective-C++ code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (?i)(s|_)?(user|usr|member|admin|guest|login|default|
new|current|old|client|server|proxy|sqlserver|
my|mysql|mongo|mongodb|db|database|ldap|smtp|
email|email(_)?smtp)?(_|\.)?token|pin|pass(wd|word|phrase))

com.fortify.sca.rules.
password_regex.php

Regular expression to match password identifiers in PHP code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.properties

Regular expression to match password identifiers in Properties files. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.python

Regular expression to match password identifiers in Python code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.ruby

Regular expression to match password identifiers in Ruby code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.sql

Regular expression to match password identifiers in SQL code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.swift

Regular expression to match password identifiers in Swift code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (?i)(s|_)?(user|usr|member|admin|guest|login|default|
new|current|old|client|server|proxy|sqlserver|
my|mysql|mongo|mongodb|db|database|ldap|smtp|
email|email(_)?smtp)?(_|\.)?(token|pin|pass(wd|word|phrase))

com.fortify.sca.rules.
password_regex.vb

Regular expression to match password identifiers in VB6 code. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
password_regex.yaml

Regular expression to match password identifiers in YAML. Setting this property overrides the global regex password rules property.

Value Type: String

Default: (?i).*pass(wd|word|phrase).*

com.fortify.sca.rules.
key_regex.global

The regular expression to match key identifiers across all languages unless a language-specific regex key rules property is set.

Value Type: String

Default: (?i)((enc|dec)(ryption|rypt)?|crypto|secret|private)(_)?key

com.fortify.sca.rules.
key_regex.abap

Regular expression to match key identifiers in ABAP code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.actionscript

Regular expression to match key identifiers in ActionScript code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.cfml

Regular expression to match key identifiers in CFML code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.cpp

Regular expression to match key identifiers in C and C++ code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.golang

Regular expression to match key identifiers in Go code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.java

Regular expression to match key identifiers in Java code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.javascript

Regular expression to match key identifiers in JavaScript and TypeScript code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.jsp

Regular expression to match key identifiers in JSP code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.objc

Regular expression used to match key identifiers in Objective-C and Objective-C++ code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.php

Regular expression to match key identifiers in PHP code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.python

Regular expression to match key identifiers in Python code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.ruby

Regular expression used to match key identifiers in Ruby code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.sql

Regular expression to match key identifiers in SQL code. Setting this property overrides the global regex key rules property.

Default: (none)

com.fortify.sca.rules.
key_regex.swift

Regular expression used to match key identifiers in Swift code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
key_regex.vb

Regular expression to match key identifiers in Visual Basic 6 code. Setting this property overrides the global regex key rules property.

Value Type: String

Default: (none)

com.fortify.sca.rules.
GCPFunctionName

Name of the serverless function called when no JSON/YAML cloud build config file exists.

Value Type: String

Default: (none)

com.fortify.sca.rules.
GCPHttpTrigger

If set to true, the scanned cloud function is an HTTP trigger.

Value Type: Boolean

Default: false
com.fortify.sca.rules.
enable_wi_correlation

If set to true and Fortify Static Code Analyzer scans an application with a supported framework, produces a results file to be imported into Fortify WebInspect to improve results.

Value Type: Boolean

Default: false