title: Fortify scan for python project
body: <p>Hot to generate Fortify for file for python files.</p>
  
  <p>A similar question is <a href="https://stackoverflow.com/questions/35777391/fortify-how-to-start-analysis-through-command#">Fortify, how to start analysis through command</a> but it lists the steps for java.</p>
  
  <p>To generate reports for python project, --python-path has to be used.
  I tried following steps, but did not work.</p>
  
  <p>Step 1: Clean,build</p>
  
  <pre><code>sourceanalyzer -64 -Xms1024M -Xmx10000M -b -verbose -Dcom.fortify.sca.ProjectRoot=/local/proj/9999/ -Dcom.fortify.WorkingDirectory=/local/proj/9999/working -logfile  /local/proj/working/9999/working/sca.log  -clean
  </code></pre>
  
  <p>Step 2: Scan: This step should generate fpr file</p>
  
  <pre><code>sourceanalyzer -b 9999 -verbose -Xms1024M -Xmx10000M -Dcom.fortify.sca.ProjectRoot=/local/proj/9999/ -Dcom.fortify.WorkingDirectory=/local/proj/9999/working  -logfile /local/proj/9999/sca.log -python-path /path/to/python -f projec_999.fpr /local/proj/**/*.py
  </code></pre>
  
  <p>This did not generate any fpr file.
  The second step gives the warning as: </p>
  
  <pre><code>[warning]: The -f option has no effect without the -scan option
  [warning]: You may need to add some arguments to the -python-path argument to SCA.
  </code></pre>
  
  <p>I am not sure if I am using the correct command.</p>
  
  <ol>
  <li>How to make sure that all python files are being scanned in the directory and subdirectories?</li>
  <li>Is there any option to add multiple python paths?</li>
  </ol>