I recently changed my Fortify scan command from sourceanalyzer -b 11809 "./**/*.go"
to sourceanalyzer -b 11809 "./wmd/**/*.go"
. The intent was to only scan Go files in the wmd
directory of my project.
However, after making this change, I noticed that the Fortify findings for a wmd/pack.go
file are gone in the Fortify UI.
My guess is that this file was not included because I have /**/
after wmd
, which might only match Go files in subdirectories of wmd
, and not get any files that are directly in wmd
.
What pattern should I provide to sourceanlyzer
so that it will scan Go files in wmd
and all subdirectories?