Having problems with your account or logging in?
A lot of changes are happening in the community right now. Some may affect you. READ MORE HERE
Highlighted
MR3
Senior Member.
2229 views

Fortify VSTS Plugin always defaults to Debug Build for SCA

Hello,

I'm currently using the Fortify VSTS Plugin to perform automated Fortify scans on .NET applications as part of our build process using the Fortify Static Code Analyzer Assessment task and I've noticed that when SCA executes devenv.exe to build the application it always elects to use the DEBUG build configuration by passing that as one of the command line arguements. 

I was wondering if we have control over which build configuration it uses or is it automatically set to use the DEBUG build by design? 

 
Labels (3)
0 Likes
1 Reply
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Re: Fortify VSTS Plugin always defaults to Debug Build for SCA

Hi MR3

The debug build is necessary in order for SCA to run a full scan. This is why the debug is added to the commandline. Even if possible you should not change that.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.