如何使用Fortify Scan 16.11扫描dotnet核心项目.Json

Question

我创建了一个默认的.Net Core 1.0.1类库，并更改了project.json中的buildOptions以包含debugType：“Full”。我使用集成的VS 2015 Fortify Scan使用16.11，我得到下面的错误。我应该如何扫描dotnet核心以避免此问题？

Project'src \ providesFileInPackage \ providesFileInPackage.xproj'未配置为输出完整的调试信息。 SCA分析需要完整的调试符号。你想忽略项目并继续？ （项目属性 - >建设 - > “高级” 按钮 - >调试信息 - > “全” OR 项目属性 - >编译 - >高级选项 - >调试信息 - > “完全” VB）

我的项目json看起来像

{ 
    "version": "1.0.0-*", 
    "dependencies": { 
    "NETStandard.Library": "1.6.0" 
    }, 
    "frameworks": { 
    "netstandard1.6": { 
     "imports": "dnxcore50" 
    } 
    }, 
    "buildOptions": { 
    "define": [ "DEBUG" ], 
    "debugType": "full" 
    } 
} 

Answer 1

我有同样的问题。它指责xproj文件，而不是project.json所以我尝试添加

<DebugType>full</DebugType> 

的PropertyGroup内，但无济于事。

最后我找到了一个解决方法，通过在命令行中运行Fortify的：现在，但我

<?xml version="1.0" encoding="utf-8"?> 
<Project ToolsVersion="4.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 

    <PropertyGroup> 
    <MySolution>MyApplication.sln</MySolution> 
    <Configuration Condition=" $(Configuration) == '' ">Debug</Configuration> 
    <CommonMSBuildProperties>BuildingSolutionFileName=true</CommonMSBuildProperties> 
    <RunHPFortify Condition=" '$(RunHPFortify)' == '' ">false</RunHPFortify> 
    <HPFortifyPath Condition=" '$(HPFortifyPath)' == '' ">$(ProgramW6432)\HP_Fortify\HP_Fortify_SCA_and_Apps_4.40\</HPFortifyPath> 
    <FortifyMSBuildTasks>$(HPFortifyPath)Core\lib\FortifyMSBuildTasks.dll</FortifyMSBuildTasks> 
    </PropertyGroup> 

    <ItemGroup> 
    <Projects Include="$(MySolution)"> 
     <AdditionalProperties>Platform=Any CPU</AdditionalProperties> 
    </Projects> 
    </ItemGroup> 

    <Target Name="Clean"> 
    <MSBuild Projects="@(Projects)" Targets="Clean" Properties="$(CommonMSBuildProperties)" /> 
    </Target> 

    <Target Name="Build"> 
    <MSBuild Projects="@(Projects)" Targets="Build" Properties="$(CommonMSBuildProperties)" 
      StopOnFirstFailure="true" /> 
    </Target> 

    <Target Name="Rebuild"> 
    <MSBuild Projects="@(Projects)" Targets="Rebuild" Properties="$(CommonMSBuildProperties)" 
      StopOnFirstFailure="true" /> 
    </Target> 

    <UsingTask TaskName="Fortify.CleanTask" AssemblyFile="$(FortifyMSBuildTasks)" /> 
    <UsingTask TaskName="Fortify.TranslateTask" AssemblyFile="$(FortifyMSBuildTasks)" /> 
    <UsingTask TaskName="Fortify.ScanTask" AssemblyFile="$(FortifyMSBuildTasks)" /> 

    <Target Name="FortifyBuild" AfterTargets="Build;Rebuild" Condition="$(RunHPFortify)"> 
    <PropertyGroup> 
     <BuildID>MyApplication</BuildID> 
     <HPFortifyLogsDir>..\HPFortifyLogs\</HPFortifyLogsDir> 
     <PackagesDir>$(MSBuildProjectDirectory)\packages\</PackagesDir> 
     <OutDir>$(MSBuildProjectDirectory)\MyApplication\bin\$(Configuration)\net452\win7-x64\</OutDir> 
     <SCATargetBinary>$(OutDir)MyApplication.exe</SCATargetBinary> 
     <FPRFilePath>$(HPFortifyLogsDir)MyApplication.fpr</FPRFilePath> 
     <SSCUploadToken Condition=" '$(SSCUploadToken)' == '' ">1cfe9977-905c-4da4-bb57-97e3dcc33099</SSCUploadToken> 
    </PropertyGroup> 

    <ItemGroup> 
     <TranslateTaskReferences Include="$(OutDir)" /> 
    </ItemGroup> 

    <CleanTask BuildID="$(BuildID)" /> 

    <TranslateTask 
     BuildID="$(BuildID)" 
     VSVersion="14.0" 
     JVMSettings="-Xmx1000M" 
     BinariesFolder="$(SCATargetBinary)" 
     References="@(TranslateTaskReferences)" 
     LogFile="$(HPFortifyLogsDir)sca_translate_task.log"> 
    </TranslateTask> 

    <ScanTask 
     BuildID="$(BuildID)" 
     JVMSettings="-Xmx1000M" 
     LogFile="$(HPFortifyLogsDir)scan_task.log" 
     Output="$(FPRFilePath)" /> 

    </Target> 

</Project> 

我不究比右侧多：

msbuild MyApplicationSca.proj /p:Configuration=Release /t:Rebuild /m 

我MyApplicationSca.proj看起来是这样的希望这能让我们更接近答案。