Fortify Static Code Analyzer (SCA) 21.1.0 發佈

Fortify Static Code Analyzer (SCA) 21.1.0新增功能：

.NET

Added support for the following languages and frameworks:

• .NET 5.0
• C# 9
• ASP.NET Blazor

To improve MSBuild integration, the custom msbuild executable and its assemblies were replaced by a Fortify-specific .targets file and task assemblies. These changes favorably impact translations under MSBuild Integration performed by the system’s MSBuild tool.

 

MSBuild Support Update

Added support for version 16.8 and 16.9.

 

Go

• Added support for Go versions 1.15 and 1.16.

• Added support for the GOPROXY environment variable.

 

Java

• Updated JSP translation produces fewer false positives

• Improved bytecode analysis

 

JavaScript

Added support for the following languages and frameworks:

• TypeScript 4.1

• Angular 10 and 11

 

Kotlin

Added support for Kotlin 1.4.20.

 

PHP

Added support for PHP 7.2, 7.3, 7.4, and 8.0.

 

Python

Added support for the following languages and frameworks:

• Python 3.9

• Django 3.1

 

Swift/Obj-C

Added support for Xcode 12.4.

 

Operating Systems (Linux)

Added support for the following Linux servers:

• SUSE Linux Enterprise Server 15.

• Red Hat Enterprise Linux 8.2.

• CentOS Linux 7.6-1810 and 8.2-2004.

• Ubuntu 20.04.1 LTS.

 

Micro Focus Visual COBOL (Technology Preview)

Added support for Micro Focus Visual COBOL 6.0.

 

C/C++ (Technology Preview)

Improved support for constructs in C++11 using new Clang-based translation.

 

Speed Dial (Technology Preview)

• Added level 3 and 4 support.
• Improved intermediate development scan speeds by up to 50% (with a reduction in reported issues).
• Reduced scan time for typed languages such as Java and C/C++.
• Level 4 support provides a full scan.