Enabling pmd analysis view in fortify

Question

We continue to strengthen to check vulnerabilities and sonars for code cleaning.

I would like to know if we can enable static code analysis in fortify and get rid of sonar / pmd / findbugs etc.

I have a java project that will be checked for security vulnerabilities using fortify sca. I also use sonar for code quality and cleanup.

Someone told me that I can set up sonar rules in reinforcement so that I can avoid sonar and save build time.

Basically, I want to configure a sonar parameter set in fortify. So fortify checks for vulnerabilities and quality and code cleanup.

Thanks in advance.

Answer 1

Fortify "" . , Null Dereference Poor Exception Handling. , .

:

?

Spring MVC:

http://blog.gdssecurity.com/labs/2013/12/2/building-fortify-custom-rules-for-spring-mvc.html

Fortify findbugs, OSS findbugs.