HP Fortify Rule Suppression Attribute C#

Question

Is there a way to suppress or address HP Fortify findings using attributes in C#? An existing analog would be the SuppressMessage attribute in the Visual Studio Code Analysis tool. ( https://msdn.microsoft.com/en-us/library/ms244717(v=vs.110).aspx )

I want to use a C# attribute, like [SuppressMessage(..)] to address issues so I don't have to manually address these issues using the Fortify Tool. Using the tool becomes rather tedious when creating new baselines or when sharing code.

Answer 1

Have you tried merging your first FPR into the new baseline? That will bring the suppressions into the current baseline so you don't have to repeat the analysis. That's how suppression was designed to work. You can also achieve this by using Software Security Center.

You can also try posting Fortify issues to their online forum at https://protect724.hp.com . The support group monitors those forums.