“The ruby frontend was unable to resolve the following require…” Errors

Question

How do I resolve issues reported by the Fortify scan of the form: “The ruby frontend was unable to resolve the following require…”

Answer

If you are using Ruby libraries or RubyGems it is necessary to point Fortify to the locations of the libraries or Gems. This error generally occurs when the appropriate paths to the libraries have not been specified. To resolve this issue, use the -ruby-path argument and the -rubygem-path argument to sourceanalyzer to specify the to specify library and RubyGem paths, respectively:

sourceanalyzer -b <buildid> -ruby-path=<path(s)> <files>
sourceanalyzer -b <buildid> -rubygem-path=<path(s)> <files>

More information on how to find the appropriate RubyGem paths is provided in the Micro Focus Security Fortify Static Code Analyzer User Guide.

If scanning from one of the graphical interfaces, please see the technical note on how to enter command-line arguments into Audit Workbench or Fortify IDE plugin.

References

Fortify documentation