Precedence of setting properties

OpenText SAST uses properties settings in a specific order. You can override any previously set properties with the values that you specify. Keep this order in mind when making changes to the properties files.

The following table lists the order of precedence for OpenText SAST properties.

Order Property specification Description
1

Command line with the -D option

Properties specified on the command line have the highest priority and you can specify them in any scan.

2 OpenText SAST quick scan configuration file

You can specify either quick scan or a scan precision level. Therefore, these property settings both have second priority.

Properties specified in the quick scan configuration file (fortify-sca-quickscan.properties) have the second priority, but only if you include the -quick option to enable quick scan mode.

OpenText SAST scan precision property files

Properties specified in the scan precision property files have the second priority, but only if you include the -scan-precision option to enable scan precision.

3 OpenText SAST configuration file

Properties specified in the OpenText SAST configuration file (fortify-sca.properties) have the lowest priority. Edit this file to change the property values on a more permanent basis for all scans.

OpenText SAST also relies on some properties that have internally defined default values.