Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-15535

Do not perform Fortify 360 uploading at all if no Project Id specified.

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Minor Minor
    • fortify360-plugin
    • None
    • Windows Server 2008 R2
      Fortify SCA 2.5.6

      The help text of "Fortify 360 Server Project Id" described:

      ... Leaving this field to blank will disable the upload...
      

      However, if we enabled the Fortify FPR Publisher (for its wonderful NVS plotting and UNSTABLE checking), fortify360 plugin still shows following stack trace:

      Uploading FPR to Fortify 360 Server at 
      ####################################################################
      FortifyClientClassLoader: JarsPath = null
      Error uploading to F360 Server: 
      java.lang.NullPointerException
      	at java.io.File.<init>(Unknown Source)
      	at org.jvnet.hudson.plugins.fortify360.FortifyClientClassLoader.getInstance(FortifyClientClassLoader.java:79)
      	at org.jvnet.hudson.plugins.fortify360.FPRPublisher.invokeFortifyClient(FPRPublisher.java:263)
      	at org.jvnet.hudson.plugins.fortify360.FPRPublisher.perform(FPRPublisher.java:178)
      	at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:19)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:807)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:782)
      	at hudson.model.Build$BuildExecution.post2(Build.java:183)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:729)
      	at hudson.model.Run.execute(Run.java:1541)
      	at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:46)
      	at hudson.model.ResourceController.execute(ResourceController.java:88)
      	at hudson.model.Executor.run(Executor.java:236)
      

      Can we skip the whole operation?

      I checked out the source code, and found:

      // if the project ID is not null, then we need to upload the FPR to 360 server
      if ( null != f360projId && DESCRIPTOR.canUploadToF360() ) {
          ...
      }
      

      But every time I enable Fortify FPR Publisher from Jenkins job configuration page, the Project Id will be set to 0!

            samngms samngms
            beta Pei-Tang Huang
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: