Cigital Java Security Rulepack: Installation Instructions

Importing the rule pack from within Fortify:

  • Install into Fortify AuditWorkbench
    1. Launch the AuditWorkbench,
    2. Click on Advanced Scan
    3. Choose the directories to scan
    4. Click on Next
    5. Click on Configure Additional Options
    6. Add the custom rule pack (e.g. *.xml file)

  • Install into Fortify Eclipse Plugin
    1. Fortify Software -> Options -> RulePack Management
    2. Import rule Pack (e.g.*.xml file)

  • Call the rulepack on the command line
    1. Translation phase:
      sourceanalyzer -b buildID [options] [source files]
    2. Scan phase:
      sourceanalyzer -b buildID -scan -rules cigpack-v[version].xml