title: Using fortify sca in jenkins with build tool (maven and gradle)
body: <p>Recently, our team choose fortify sca to scan our projects.
  Our projects have two types JavaEE(without EJB) and Android.</p>
  
  <p>And we want to add the scan step into the CI steps.
  So I add scripts like this to scan after jenkins build the project.</p>
  
  <pre><code>sourceanalyzer -b manage_dev -clean
  sourceanalyzer -b manage_dev -jdk 1.6 -encoding UTF-8 "src/."
  sourceanalyzer -b manage_dev -Xmx4000M -scan -f manage_dev_report.fpr  
  ReportGenerator -format pdf -f manage_dev_report.pdf -source manage_dev_report.fpr
  </code></pre>
  
  <p>However I don't know how to set the parameter -cp(classpath) ,
  due to we're using build tool the dependency libs is not inside our source code.</p>
  
  <p>I know there's some maven and gradle plugin for fortify.
  But we don't want to change our build scripts.</p>
  
  <p>Thanks for all your helps.</p>
  
  <p>Ps. We are using HP_Fortify_SCA_and_Apps_4.20, and newest version of jenkins.</p>