Page History

...

In this section:

Introduction

Suppressions enable you to mark static analysis violations as known (but acceptable in the particular instance) without modifying the source code. When a Parasoft tool connected to DTP finds a static analysis violation during code analysis, it checks either Team Server or DTP to see if the violation is supposed to be suppressed on the server. If the violation is marked for suppression, it is reported as such by the tool. See Prioritization Tab#Suppressing Violations for additional information.

...

You can use the TCM Suppression Tool to migrate legacy TCM suppression information to DTP. The tool is available as a separate download. Contact your Parasoft representative. 

Requirements

• Parasoft static analysis tool version 10.4.0 or later.
• DTP version 5.4.0 or later.
• Java (provided in DTP installation).
• Access to DTP file system to collect data from TCM.
• DTP username and password to migrate (upload) data to DTP.

Usage

1. Run static analysis on the code associated with TCM suppressions using a 10.4.0 or later static analysis tool and send the results to DTP. This enables DTP to map TCM suppressions to DTP violations.

2. On the machine where DTP is running, execute the TCM Suppressions Tool using the following command:

   Code Block
   language text
   java -jar TcmSuppressionsTool.jar -w -f <FILENAME>.json -i <DTP_INSTALL_DIR> -t <TCM_USERNAME> -l <TOOLNAME>

   This command reads the TCM storage files on disk, collects information about TCM suppressions, and stores the information in a JSON file on disk. Because the file system is accessed directly, this command must be executed on the machine running DTP. See TCM Tool Options for details about the options.

   Info
   title Java is required
   You can use the Java executable shipped with DTP located at <DTP_INSTALL>/jre/bin/java to ensure that you are using a supported version of Java.

3. Execute the TCM Suppressions Tool using the following command to migrate the suppressions to DTP:

   Code Block
   language text
   java -jar TcmSuppressionsTool.jar -m -f <FILENAME>.json -d <PROTOCOL>//<DTP_HOST>:<DTP_PORT> -u <DTP_USERNAME> -p <DTP_PASSWORD> -b <BUILD_ID>

   This command reads the JSON file and uploads the data to DTP using the DTP REST API. You can run this command from any machine that can create an HTTP connection to DTP. The TCM suppressions are compared with the static analysis results for a specified build. See TCM Tool Options for details about the options.

   Info
   title Hiding your password in the command
   If you do not want to use a password in the command line, omit the -p option and you will be prompted for a password.

4. Existing results are not changed on DTP–the only change is that the violations have been marked for suppression in the next static analysis run. To use the suppression information stored on DTP, run static analysis again (using the 10.4.0 or later tool). The violations marked to be suppressed on DTP are reported as suppressions.

After migration, the updated DTP violations will be marked as "Suppress the selected violations in subsequent analysis runs" in the Prioritization tab of the Violations Explorer. The Reason field will contain the same string used in the TCM suppression. To update a DTP violation based on a TCM suppression, the violation and suppression must have the same file path, rule ID, and violation message. DTP violations already marked for suppression in subsequent builds and DTP violations that were suppressed in the build used for comparison are not modified.

TCM Tool Options

You can use the following options when executing the TCM Suppression Tool:

...