Using Filter Sets

Filters in an issue template determine how the results from Fortify Static Code Analyzer are shown. In addition to filters, filter sets enable you to have a selection of filters used at any one time. Each FPR has an issue template associated with it. You can use filter sets to reduce the number of issues based on conditions you specify with filters in an issue template. This can dramatically reduce the size of an FPR.

To do this, use Fortify Audit Workbench to create a filter in a filter set, and then run the Fortify Static Code Analyzer scan with the filter set and the containing issue template. For more information and a basic example of how to create a filter set, see Excluding Issues with Filters Sets.

Note: Although filtering issues with a filter set can reduce the size of the FPR, they do not usually reduce the scan time. Fortify Static Code Analyzer examines the filter set after it calculates the issues to determine whether to write them to the FPR file. The filters in a filter set determine the rule types that Fortify Static Code Analyzer loads.