Translating without explicitly running OpenText SAST

You have the option to translate your Visual Studio project without invoking OpenText SAST directly. This requires the Fortify.targets file, which is located in <sast_install_dir>\Core\private-bin\sca\MSBuildPlugin in the DotNet and Framework directory. You can specify the file using an absolute or relative path in the build command line that builds your project. Use the path with the Dotnet or Framework directory depending on the build command you are using: dotnet.exe or MSBuild.exe respectively. For example:

dotnet.exe msbuild /t:rebuild /p:CustomAfterMicrosoftCommonTargets=<sast_install_dir>\Core\private-bin\sca\MSBuildPlugin\Dotnet\Fortify.targets Sample.sln

or

msbuild.exe /t:rebuild 
/p:CustomAfterMicrosoftCommonTargets=<sast_install_dir>\Core\private-bin\sca\MSBuildPlugin\Framework\Fortify.targets Sample.sln

There are several environment variables that you can set to configure the translation of your project. Most of them have default values, which OpenText SAST uses if the variable is not set. These variables are listed in the following table.