Description:
How to collect Fortify Static Code Analyzer (SCA) logs for troubleshooting purposes.
Resolution:
A). Please provide the exact command you use in SCA to create the build.
B). Collect and provide SCA logs:
1). By default, Fortify Static Code Analyzer creates two log files in the following location:
Windows: C:\Users\<username>\AppData\Local\Fortify\sca<version>\log
Non-Windows: <userhome>/.fortify/sca<version>/log
where <version> is the version of Fortify Static Code Analyzer that you are using.
Note: remember to enable -debug while running SCA for debug information to be generated and collected.
2). Two log files are needed:
sca.log or translate.log
sca_FortifySupport.log or FortifySupport.log
Note: The logs could also be in the build directory.
3). Remember to provide the timestamp/timezone when you run the command again, so that it can be correlated with the logs that are being provided.
Reference:
Locating the Log Files
https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/2220/SCA_Help_22.2.0/index.htm#Troubleshooting/LogFiles/AccessLogFiles.htm?TocPath=Troubleshooting%257C_____5
Command-Line Interface | Other Options
-debug
https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/2220/SCA_Help_22.2.0/index.htm#cli/other-opts.htm?TocPath=Command-Line%2520Interface%257C_____4