“The ActionScript frontend was unable to resolve the following import…” Errors

Question

How do I resolve issues reported by the Fortify scan of the form: “The ActionScript frontend was unable to resolve the following import…”

Answer

This error generally occurs when additional SWC or SWF flex libraries need to be specified so Fortify can link to those libraries. To resolve this issue, use the -flex-libraries argument to sourceanalyzer to specify the additional libraries. The list of libraries should be separated by a semi-colon on Windows systems and a colon on non-Windows systems:

sourceanalyzer -b <buildid> -flex-libraries <list of libraries> <files>

If scanning from one of the graphical interfaces, please see the technical note on how to enter command-line arguments into Audit Workbench or Fortify IDE plugin.

References

Fortify documentation