Fortify documentation

Question

Where can I find documentation on Fortify and what documentation is available?

Answer

See Micro Focus website for Fortify documentation: https://www.microfocus.com/documentation/

Note that new documentation is generally not released along with “patch” releases, only the major Fortify version updates (v19.2, v20.1, etc.).

See the sections below for links to documentation for specific Fortify tools.

Fortify Static Code Analyzer (SCA)

See Micro Focus website for Fortify documentation: https://www.microfocus.com/documentation/fortify-static-code/

All aspects of Fortify are documented, however the following are most likely to be useful for VA developers:

Document Filename Description
Micro Focus Security Fortify Static Code Analyzer User Guide SCA_Guide_<version>.pdf This will answer most Fortify translation and scan questions
Micro Focus Security Fortify Software System Requirements Fortify_Sys_Reqs_<version>.pdf This will answer questions about which languages (and versions), compilers, and operating systems are supported by Fortify
Micro Focus Security Fortify Audit Workbench User Guide AWB_Guide_<version>.pdf How to use Audit Workbench
Micro Focus Security Fortify Plugins for Eclipse Eclipse_Plugins_Guide_<version>.pdf How to install and use the Eclipse plugin
Micro Focus Security Fortify Packages for Visual Studio User Guide VS_Ext_Guide_<version>.pdf How to install and use the Visual Studio plugin
Micro Focus Security Fortify Custom Rules Guide SCA_Cust_Rules_Guide_<version>.zip Information on how to create custom rulesThis document is included in the Fortify SCA distribution package.

Fortify Software Security Center (SSC)

See Micro Focus website for Fortify documentation: https://www.microfocus.com/documentation/fortify-software-security-center/

All aspects of Fortify are documented, however the following are most likely to be useful for VA developers:

Document Filename Description
Micro Focus Fortify Software Security Center User Guide SSC_Guide_<version>.pdf This will answer most questions on how to install and use the Fortify SSC
Micro Focus Security Fortify Software System Requirements Fortify_Sys_Reqs_<version>.pdf This will answer questions about which languages (and versions), compilers, and operating systems are supported by Fortify
Micro Focus Fortify ScanCentral SAST Installation, Configuration, and Usage Guide ScanCentral_Guide_<version>.pdf This will answer most questions on how to install and use Fortify ScanCentral SAST

Fortify CI Server Plugins

See Micro Focus website for Fortify documentation:

Fortify Jenkins Plugin: https://www.microfocus.com/documentation/fortify-jenkins-plugin/

Fortify Plugin for Bamboo: https://www.microfocus.com/documentation/fortify-plugin-for-bamboo/

Fortify Azure DevOps Extension: https://www.microfocus.com/documentation/fortify-azure-devops-extension/

Other Documentation

Fortify extension for Visual Studio Code: https://www.microfocus.com/documentation/fortify-visual-studio-code/