Does Fortify takes long time while "Generating Intermediate Files"

Question

I am using Fortify for security scan one of our cSharp application and it is taking hours while "Generating Intermediate Files" I am not sure it is hung or really doing something. Does it really take such a long time?

Answer 1

Generating intermediate files at the start of a .NET build is usually when SCA is creating NST files for the library functions used. This should only really need to occur once per project per machine although after the first project it shouldn't take that long. Then they will be stored in ${fortify.ProjectRoot}/sca<version>/build/Libraries/ as long as this isn't deleted (and you don't run sourceanalyzer -clean (as in cleaning without a build ID) then they should be in here for subsequent scans. Increasing memory options may help you, but I would advise to just let it run and then see how it goes in subsequent scans.