Fortify documentation
Question
Where can I find documentation on Fortify and what documentation is available?
Answer
See OpenText website for Fortify documentation: https://www.microfocus.com/documentation/
Note that new documentation is generally not released along with “patch” releases, only the major Fortify version updates (v19.2, v20.1, etc.).
See the sections below for links to documentation for specific Fortify tools.
Fortify Static Code Analyzer (SCA)
See OpenText website for Fortify documentation: https://www.microfocus.com/documentation/fortify-static-code/
All aspects of Fortify are documented, however the following are most likely to be useful for VA developers:
| Document | Filename | Description |
|---|---|---|
| OpenText Fortify Static Code Analyzer User Guide | SCA_Guide_<version>.pdf | This will answer most Fortify translation and scan questions |
| OpenText Fortify Software System Requirements | Fortify_Sys_Reqs_<version>.pdf | This will answer questions about which languages (and versions), compilers, and operating systems are supported by Fortify |
| OpenText Fortify Audit Workbench User Guide | AWB_Guide_<version>.pdf | How to use Audit Workbench |
| OpenText Fortify Plugins for Eclipse | Eclipse_Plugins_Guide_<version>.pdf | How to install and use the Eclipse plugin |
| OpenText Fortify Packages for Visual Studio User Guide | VS_Ext_Guide_<version>.pdf | How to install and use the Visual Studio plugin |
| OpenText Fortify Custom Rules Guide | SCA_Cust_Rules_Guide_<version>.zip | Information on how to create custom rulesThis document is included in the Fortify SCA distribution package. |
Fortify Software Security Center (SSC)
See OpenText website for Fortify documentation: https://www.microfocus.com/documentation/fortify-software-security-center/
All aspects of Fortify are documented, however the following are most likely to be useful for VA developers:
| Document | Filename | Description |
|---|---|---|
| OpenText Fortify Software Security Center User Guide | SSC_Guide_<version>.pdf | This will answer most questions on how to install and use the Fortify SSC |
| OpenText Fortify Software System Requirements | Fortify_Sys_Reqs_<version>.pdf | This will answer questions about which languages (and versions), compilers, and operating systems are supported by Fortify |
| OpenText Fortify ScanCentral SAST Installation, Configuration, and Usage Guide | ScanCentral_Guide_<version>.pdf | This will answer most questions on how to install and use Fortify ScanCentral SAST |
Fortify CI Server Plugins
See OpenText website for Fortify documentation:
Fortify Jenkins Plugin: https://www.microfocus.com/documentation/fortify-jenkins-plugin/
Fortify Plugin for Bamboo: https://www.microfocus.com/documentation/fortify-plugin-for-bamboo/
Fortify Azure DevOps Extension: https://www.microfocus.com/documentation/fortify-azure-devops-extension/
Other Documentation
Fortify extension for Visual Studio Code: https://www.microfocus.com/documentation/fortify-visual-studio-code/