Output properties

The properties for the fortify-sca.properties file in the following table apply to the analysis output.

Property name Description

com.fortify.sca.ResultsFile 

The file to which results are written.

Value type: String

Default: (none)

Command-line option: -f

Example: com.fortify.sca.ResultsFile=MyResults.fpr

com.fortify.sca.Renderer 

Controls the output format. The valid values are fpr, fvdl, text, and auto. The default of auto selects the output format based on the extension of the file provided with the -f option.

Value type: String

Default: auto

Command-line option: -format

com.fortify.sca.OutputAppend 

If set to true, OpenText SAST appends results to an existing results file.

Value type: Boolean

Default: false

Command-line option: -append

com.fortify.sca.ResultsAsAvailable 

If set to true, OpenText SAST prints results as they become available. This is helpful if you do not specify the -f option (to specify an output file) and print to stdout.

Value type: Boolean

Default: false

com.fortify.sca.BuildLabel 

Specifies a label for the scanned project. OpenText SAST does not use this label but includes it in the results.

Value type: String

Default: (none)

Command-line option: -build-label

com.fortify.sca.BuildProject 

Specifies a name for the scanned project. OpenText SAST does not use this name but includes it in the results.

Value type: String

Default: (none)

Command-line option: -build-project

com.fortify.sca.BuildVersion 

Specifies a version number for the scanned project. OpenText SAST does not use this version number but it is included in the results.

Value type: String

Default: (none)

Command-line option: -build-version

com.fortify.sca.MachineOutputMode 

Output information in a format that scripts or OpenText SAST tools can use rather than printing output interactively. Instead of a single line to display scan progress, a new line is printed below the previous one on the console to display updated progress.

Value type: Boolean

Default: (not enabled)

Command-line option: -machine-output

com.fortify.sca.SnippetContextLines 

Sets the number of lines of code to display surrounding an issue. Snippets always include the two lines of code on each side of the line where the error occurs. By default, five lines of code are displayed.

Value type: Number

Default: 2

com.fortify.sca.FVDLDisableDescriptions 

If set to true, excludes OpenText Application Security Content descriptions from the analysis results file (FVDL).

Value type: Boolean

Default: false

Command-line option: -fvdl-no-descriptions

com.fortify.sca.FVDLDisableEngineData 

If set to true, excludes engine data from the analysis results file (FVDL).

Value type: Boolean

Default: false

Command-line option:-fvdl-no-enginedata

com.fortify.sca.FVDLDisableLabelEvidence 

If set to true, excludes label evidence from the analysis results file (FVDL).

Value type: Boolean

Default: false

com.fortify.sca.FVDLDisableProgramData 

If set to true, excludes the ProgramData section from the analysis results file (FVDL).

Value type: Boolean

Default: false

Command-line option: -fvdl-no-progdata

com.fortify.sca.FVDLDisableSnippets 

If set to true, excludes code snippets from the analysis results file (FVDL).

Value type: Boolean

Default: false

Command-line option: -fvdl-no-snippets

com.fortify.sca.FVDLStylesheet 

Specifies location of the style sheet for the analysis results.

Value type: String (path)

Default:
${com.fortify.Core}/resources/sca/fvdl2html.xsl