Using an Application Identifier to Upload FPR Files

To upload an FPR into Fortify Software Security Center using an applicationClosedA customer codebase evaluated by Fortify software. The top-level container for one or more application versions. When you work with a new codebase, the application and first application version are automatically created. An application includes one or more application versions that users create and configure. identifier:

  1. Navigate to the <ssc_install_dir>/Tools/fortifyclient/bin directory.
  2. Run the following:

    fortifyclient -url <ssc_url> -authtoken <token> uploadFPR -file <fpr_name> -applicationVersionID <id>

    where

    <ssc_url> represents the URL of the Fortify Software Security Center instance
    (see About Specifying the Fortify Software Security Center URL)

    <token>

    represents a valid fortifyclientClosedA command-line utility used to manage files and perform common automated tasks (such as analysis result uploads) on Fortify Software Security Center. authentication tokenClosedUnique keys that enable users to automate actions within Fortify Software Security Center without using passwords. The user requests a token, authenticates to the Fortify Software Security Center server, and receives back a string that is permissioned for a small set of time-limited actions. Fortify Scan Analytics also generates authentication tokens that are required to configure a connection between Scan Analytics and Fortify Software Security Center.

    <fpr_name>

    represents the full path and name of the FPR file with its extension

    <id>

    represents the Fortify Software Security Center application versionClosedA particular iteration of the analysis of a codebase as it applies to Fortify Software Security Center. An application always begins with a first version. An administrator adds new versions, as needed. identifier

For information about how to acquire Fortify Software Security Center application identifiers, see Listing Application Versions.