Re: Fortify and Maven
Hi Kunal, you may download Fortify package and build maven plugin from sources. In plugin's target directory you will find a site which contains usage instruction for single and multi module project. Kind regards, Patryk -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5781540.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
Hi, I have got the plugin from the fortify site. But not able to configure it... Would it be possible to share the configuration steps? with Maven (pref 3) Thanks and Kunal Handa -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5739152.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
I have got the plugin from the fortify site. But not able to configure it... Would it be possible to share the configuration steps? with Maven (pref 3) (This reply stolen from Anders...) Please, this is a mailing list for generic Maven questions. The Fortify product comes with professional support, please use it! Wayne - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
Hi, I am also trying to generate a fortify report of a java source code using maven. But i am not able to do it. Can you please revert me back of how you did it?? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709785.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
What problems do you run into? Have you got access to the maven site docs for the plugin? If not, get hold of that from the Fortify support. /Anders On Fri, May 25, 2012 at 11:22 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, I am also trying to generate a fortify report of a java source code using maven. But i am not able to do it. Can you please revert me back of how you did it?? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709785.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
Hi, Actually can you please guide me with, where can I get any steps to generate a fortify report using Maven. Is there any plug-inn that we can use to generate the fortify report ?? I downloaded and installed the fortify360 plugin and the maven-fortify plug-in and then added the dependencies into my pom.xml file. But it did-not work.I dint get any .fpr file(format i need for my fortify report) of my source code.Please revert me with what i should do inorder to generate a fortify report of my projects. Regards, Swagatika On 5/25/12, Anders Hammar [via Maven] ml-node+s40175n5709786...@n5.nabble.com wrote: What problems do you run into? Have you got access to the maven site docs for the plugin? If not, get hold of that from the Fortify support. /Anders On Fri, May 25, 2012 at 11:22 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, I am also trying to generate a fortify report of a java source code using maven. But i am not able to do it. Can you please revert me back of how you did it?? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709785.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org ___ If you reply to this email, your message will be added to the discussion below: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709786.html To unsubscribe from Fortify and Maven, visit http://maven.40175.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=118623code=c3dhZ2F0aWthbWFoYXBhdHJhMjBAZ21haWwuY29tfDExODYyM3w2MDk2NjE4MzQ= -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709793.html Sent from the Maven - Users mailing list archive at Nabble.com.
Re: Fortify and Maven
Did you get hold of the Maven site docs for the Fortify plugin? You shouldn't declare a dependency to the plugin, but add plugin bindings. I don't recall the exact steps, but they are described in the Maven site for the plugin and/or the Fortify documentation. I believe you should be able to get step-by-step support from the Fortify support line as well if you need it. /Anders On Fri, May 25, 2012 at 11:49 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, Actually can you please guide me with, where can I get any steps to generate a fortify report using Maven. Is there any plug-inn that we can use to generate the fortify report ?? I downloaded and installed the fortify360 plugin and the maven-fortify plug-in and then added the dependencies into my pom.xml file. But it did-not work.I dint get any .fpr file(format i need for my fortify report) of my source code.Please revert me with what i should do inorder to generate a fortify report of my projects. Regards, Swagatika On 5/25/12, Anders Hammar [via Maven] ml-node+s40175n5709786...@n5.nabble.com wrote: What problems do you run into? Have you got access to the maven site docs for the plugin? If not, get hold of that from the Fortify support. /Anders On Fri, May 25, 2012 at 11:22 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, I am also trying to generate a fortify report of a java source code using maven. But i am not able to do it. Can you please revert me back of how you did it?? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709785.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org ___ If you reply to this email, your message will be added to the discussion below: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709786.html To unsubscribe from Fortify and Maven, visit http://maven.40175.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=118623code=c3dhZ2F0aWthbWFoYXBhdHJhMjBAZ21haWwuY29tfDExODYyM3w2MDk2NjE4MzQ= -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709793.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
Can you please tell me the exact location for the Fortify documentation. I searched a lot but i am not able to get any info. On 5/25/12, Anders Hammar [via Maven] ml-node+s40175n5709794...@n5.nabble.com wrote: Did you get hold of the Maven site docs for the Fortify plugin? You shouldn't declare a dependency to the plugin, but add plugin bindings. I don't recall the exact steps, but they are described in the Maven site for the plugin and/or the Fortify documentation. I believe you should be able to get step-by-step support from the Fortify support line as well if you need it. /Anders On Fri, May 25, 2012 at 11:49 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, Actually can you please guide me with, where can I get any steps to generate a fortify report using Maven. Is there any plug-inn that we can use to generate the fortify report ?? I downloaded and installed the fortify360 plugin and the maven-fortify plug-in and then added the dependencies into my pom.xml file. But it did-not work.I dint get any .fpr file(format i need for my fortify report) of my source code.Please revert me with what i should do inorder to generate a fortify report of my projects. Regards, Swagatika On 5/25/12, Anders Hammar [via Maven] ml-node+s40175n5709786...@n5.nabble.com wrote: What problems do you run into? Have you got access to the maven site docs for the plugin? If not, get hold of that from the Fortify support. /Anders On Fri, May 25, 2012 at 11:22 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, I am also trying to generate a fortify report of a java source code using maven. But i am not able to do it. Can you please revert me back of how you did it?? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709785.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org ___ If you reply to this email, your message will be added to the discussion below: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709786.html To unsubscribe from Fortify and Maven, visit http://maven.40175.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=118623code=c3dhZ2F0aWthbWFoYXBhdHJhMjBAZ21haWwuY29tfDExODYyM3w2MDk2NjE4MzQ= -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709793.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org ___ If you reply to this email, your message will be added to the discussion below: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709794.html To unsubscribe from Fortify and Maven, visit http://maven.40175.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=118623code=c3dhZ2F0aWthbWFoYXBhdHJhMjBAZ21haWwuY29tfDExODYyM3w2MDk2NjE4MzQ= -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709795.html Sent from the Maven - Users mailing list archive at Nabble.com.
Re: Fortify and Maven
Did you read my mail where I said that you can get it from the Fortify support? Please, this is a mailing list for generic Maven questions. The Fortify product comes with professional support, please use it! /Anders On Fri, May 25, 2012 at 12:42 PM, Swagatika swagatikamahapatr...@gmail.com wrote: Can you please tell me the exact location for the Fortify documentation. I searched a lot but i am not able to get any info. On 5/25/12, Anders Hammar [via Maven] ml-node+s40175n5709794...@n5.nabble.com wrote: Did you get hold of the Maven site docs for the Fortify plugin? You shouldn't declare a dependency to the plugin, but add plugin bindings. I don't recall the exact steps, but they are described in the Maven site for the plugin and/or the Fortify documentation. I believe you should be able to get step-by-step support from the Fortify support line as well if you need it. /Anders On Fri, May 25, 2012 at 11:49 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, Actually can you please guide me with, where can I get any steps to generate a fortify report using Maven. Is there any plug-inn that we can use to generate the fortify report ?? I downloaded and installed the fortify360 plugin and the maven-fortify plug-in and then added the dependencies into my pom.xml file. But it did-not work.I dint get any .fpr file(format i need for my fortify report) of my source code.Please revert me with what i should do inorder to generate a fortify report of my projects. Regards, Swagatika On 5/25/12, Anders Hammar [via Maven] ml-node+s40175n5709786...@n5.nabble.com wrote: What problems do you run into? Have you got access to the maven site docs for the plugin? If not, get hold of that from the Fortify support. /Anders On Fri, May 25, 2012 at 11:22 AM, Swagatika swagatikamahapatr...@gmail.com wrote: Hi, I am also trying to generate a fortify report of a java source code using maven. But i am not able to do it. Can you please revert me back of how you did it?? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709785.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org ___ If you reply to this email, your message will be added to the discussion below: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709786.html To unsubscribe from Fortify and Maven, visit http://maven.40175.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=118623code=c3dhZ2F0aWthbWFoYXBhdHJhMjBAZ21haWwuY29tfDExODYyM3w2MDk2NjE4MzQ= -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709793.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org ___ If you reply to this email, your message will be added to the discussion below: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709794.html To unsubscribe from Fortify and Maven, visit http://maven.40175.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=118623code=c3dhZ2F0aWthbWFoYXBhdHJhMjBAZ21haWwuY29tfDExODYyM3w2MDk2NjE4MzQ= -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p5709795.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: Fortify and Maven
Hi All, I am new to Maven and new to Fortify. We have Fortify v5.2 (pre-360) and I need to generate whatever Fortify needs to run the build (ant build) for this multi-module project. Any guidance on how I can do that? Thanks!! Ginni -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p3260957.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
RE: Fortify and Maven
Ginni, Can you use the maven-sca-plugin-2.6 with your version of the server ? If so the plugin is documented pretty well and you can use maven instead of ant. -Original Message- From: ginni [mailto:gi...@aero.org] Sent: Thursday, November 11, 2010 12:45 PM To: users@maven.apache.org Subject: Re: Fortify and Maven Hi All, I am new to Maven and new to Fortify. We have Fortify v5.2 (pre-360) and I need to generate whatever Fortify needs to run the build (ant build) for this multi-module project. Any guidance on how I can do that? Thanks!! Ginni -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p3260957.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - The information in this message may be proprietary and/or confidential, and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify First Data immediately by replying to this message and deleting it from your computer. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
RE: Fortify and Maven
I would love to. Where can I find it? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p3261165.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
RE: Fortify and Maven
You can get it from the fortify website. You may need to talk to a support tech for the exact location. -Original Message- From: ginni [mailto:gi...@aero.org] Sent: Thursday, November 11, 2010 2:40 PM To: users@maven.apache.org Subject: RE: Fortify and Maven I would love to. Where can I find it? -- View this message in context: http://maven.40175.n5.nabble.com/Fortify-and-Maven-tp118623p3261165.html Sent from the Maven - Users mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org - The information in this message may be proprietary and/or confidential, and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify First Data immediately by replying to this message and deleting it from your computer. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Fortify and Maven
I was asked about integrating Fortify (Fortify 360) in the Maven build process. Anyone here with any experience of that? A found an open source Maven plugin, but someone said that Fortify has one of their own... /Anders
Re: Fortify and Maven
To follow up on my own thread. It turns out that the actually do have their own plugin (maven-sca-plugin). Anyone with experience of that? /Anders On Wed, Apr 28, 2010 at 09:32, Anders Hammar and...@hammar.net wrote: I was asked about integrating Fortify (Fortify 360) in the Maven build process. Anyone here with any experience of that? A found an open source Maven plugin, but someone said that Fortify has one of their own... /Anders
Re: Fortify and Maven
Hi I have integrated that plugin into many projects. What are you trying to do? On Wed, Apr 28, 2010 at 2:11 AM, Anders Hammar and...@hammar.net wrote: To follow up on my own thread. It turns out that the actually do have their own plugin (maven-sca-plugin). Anyone with experience of that? /Anders On Wed, Apr 28, 2010 at 09:32, Anders Hammar and...@hammar.net wrote: I was asked about integrating Fortify (Fortify 360) in the Maven build process. Anyone here with any experience of that? A found an open source Maven plugin, but someone said that Fortify has one of their own... /Anders
Re: Fortify and Maven
I was asked to look into this and is basically wondering about any gotchas. Any issues you've encountered? Have you used it integrated in the build process through a profile, or have you just used the plugin from command line (mvn sca:scan and similar)? /Anders On Wed, Apr 28, 2010 at 19:24, Larry Suto larry.s...@gmail.com wrote: Hi I have integrated that plugin into many projects. What are you trying to do? On Wed, Apr 28, 2010 at 2:11 AM, Anders Hammar and...@hammar.net wrote: To follow up on my own thread. It turns out that the actually do have their own plugin (maven-sca-plugin). Anyone with experience of that? /Anders On Wed, Apr 28, 2010 at 09:32, Anders Hammar and...@hammar.net wrote: I was asked about integrating Fortify (Fortify 360) in the Maven build process. Anyone here with any experience of that? A found an open source Maven plugin, but someone said that Fortify has one of their own... /Anders
Re: Fortify and Maven
I have done both and have not encountered too many problems. The one thing that you might want to consider removing plugin management in the Fortify profiles. Otherwise you have to declare the sca plugin in every module during an aggregate scan On Wed, Apr 28, 2010 at 11:09 AM, Anders Hammar and...@hammar.net wrote: I was asked to look into this and is basically wondering about any gotchas. Any issues you've encountered? Have you used it integrated in the build process through a profile, or have you just used the plugin from command line (mvn sca:scan and similar)? /Anders On Wed, Apr 28, 2010 at 19:24, Larry Suto larry.s...@gmail.com wrote: Hi I have integrated that plugin into many projects. What are you trying to do? On Wed, Apr 28, 2010 at 2:11 AM, Anders Hammar and...@hammar.net wrote: To follow up on my own thread. It turns out that the actually do have their own plugin (maven-sca-plugin). Anyone with experience of that? /Anders On Wed, Apr 28, 2010 at 09:32, Anders Hammar and...@hammar.net wrote: I was asked about integrating Fortify (Fortify 360) in the Maven build process. Anyone here with any experience of that? A found an open source Maven plugin, but someone said that Fortify has one of their own... /Anders
Re: Fortify and Maven
Ok, thanks Larry. I'll post back if I run into any troubles. /Anders On Wed, Apr 28, 2010 at 20:23, Larry Suto larry.s...@gmail.com wrote: I have done both and have not encountered too many problems. The one thing that you might want to consider removing plugin management in the Fortify profiles. Otherwise you have to declare the sca plugin in every module during an aggregate scan On Wed, Apr 28, 2010 at 11:09 AM, Anders Hammar and...@hammar.net wrote: I was asked to look into this and is basically wondering about any gotchas. Any issues you've encountered? Have you used it integrated in the build process through a profile, or have you just used the plugin from command line (mvn sca:scan and similar)? /Anders On Wed, Apr 28, 2010 at 19:24, Larry Suto larry.s...@gmail.com wrote: Hi I have integrated that plugin into many projects. What are you trying to do? On Wed, Apr 28, 2010 at 2:11 AM, Anders Hammar and...@hammar.net wrote: To follow up on my own thread. It turns out that the actually do have their own plugin (maven-sca-plugin). Anyone with experience of that? /Anders On Wed, Apr 28, 2010 at 09:32, Anders Hammar and...@hammar.net wrote: I was asked about integrating Fortify (Fortify 360) in the Maven build process. Anyone here with any experience of that? A found an open source Maven plugin, but someone said that Fortify has one of their own... /Anders
