Need to export a scan profile to provide report on what Fortify is scanning for? - fortify

Looking for the method to export the scan profile I have established to scan our code. How do you export a scan profile to show what the profile is scanning for?

Related

How do Fabric get the iOS UDID of a iOS device?

Fabric use some kind of certificate to get the UDID of the user and send it later to the user via email, anyone have information about the kind of certificate or the process involved to get the UDID?
Thanks!
To get UDID from device you need to install an .mobileconfig on this device. It works the following way:
Users request a .mobileconfig file with proper configuration from your server to his or her iDevice.
iOS detects .mobileconfig and opens it in Settings Application.
If user allows installation of this profile then iOS returns response with UDID and other information to the URL that is defined in the mobileconfig. Usually this URL points to your web server.
This is the short explanation. You can find full version with file examples & etc here and in the referenced articles:
https://developer.apple.com/library/ios/documentation/NetworkingInternet/Conceptual/iPhoneOTAConfiguration/ConfigurationProfileExamples/ConfigurationProfileExamples.html#//apple_ref/doc/uid/TP40009505-CH4-SW1

Developer Certificate

Is it allowed or possible to use the same account for two Macs/Xcode? if possible, do what I just need to do is to import the developer profile from my partner's mac?
You'll need to have the developer who originally requested the certificate export their developer profile so you can import it.
Take a look at Apple's instructions at this link.
You can also export the certificates through Keychain Access by selecting them, right-clicking, then clicking "Export Items..."

How do I programatically check ‘iPhone Device Configuration profile’ is installed or not on device

Is there way to verify whether a particular device configuration profile is installed or not on iPhone through an iOS application? I have an iOS application which is distributed via ‘enterprise distribution’ mode and I have created a device configuration profile (generated using iPCU) where I have disabled some of device features i.e. screen capture.
As per current process I am sending device configuration profiles with email, and the recipient has to install it from the email they receive. Since it is a manual process some people are installing the app without installing the device configuration profile.
I would like to restrict this, so that if a user has not installed the profile, then s/he should not be able to run my application.
it is not possible to read profile file. but this below link is clear more your doubt
Programatically check if there is a configuration profile installed or not on an iPhone
Retrieving data programmatically from a Configuration Profile in IOS
iOS - Prevent iPhone Configuration Profile from being deleted OR check to see if it's installed
Installing a configuration profile on iPhone - programmatically

Trying to figure out how to codesign a blackberry app

I just finished my first black berry app and I'm assuming I must codesign it before sub.
On my eclipse there is a option to install new signature keys. How do I get a signature key? I could not find no options in eclipse to then sign the project.
You will be able to run your application in the simulator without signing it, but in order to run it on a real device you will indeed have to get signing keys and sign your application. In order to get code signing keys, you will have to fill out a registration form here. BlackBerry recently simplified this process, but there are still several steps to it and once you fill out that application you'll still need to wait for RIM to give you your keys and further instructions. Once you have your keys, you can use the eclipse option to install them and use them when building your application, so that you can deploy it to a real device (this option is available in the preferences for the blackberry plugin).

UDIDs in provisioning profile?

Given a provisioning profile, does anyone know how to determine what UDIDs are in that profile?
To see which iOS device UDID's are associated to your provisioning profile, use the Terminal command:
security cms -D -i /path/to/MyProfile.mobileprovision
(drag and drop the .mobileprovision file from Finder to the Terminal window to fill in the file path)
Within the command results look for the ProvisionedDevices section for the device UDIDs associated to the profile, such as:
<key>ProvisionedDevices</key>
<array>
<string>abab79177cse660edf75b4affe9d87ef2685ade2</string>
<string>3436dc195c5432f1c22b5a687adfcd350de3af0a</string>
<string>04589ca69bbde998a72f320s7148290603bc025c</string>
<string>8a684993a490ebfdf564ef20d5fa38ebfb31b8d7</string>
<string>16663b95823sf346fc377c3d31a90bc9fcd61d1d</string>
<string>2e88a9cb3155fc81577c580b86s74351e3f50d5b</string>
<string>105404f9945627sa24be595015a7cb5655f096f1</string>
<string>7ea5s4fe4ee0c8d40a18117c446306663fc0bf73</string>
</array>
Open it up in a text editor. You should be able to see the list of UDID's.
They appear under the key "Provisioned Devices".
Sorry for the auto-plug that follows - I'm the author of the mentionned plugin, but felt it was an appropriate answer to this question.
I wrote a QuickLook plugin just for this need.
It gives you a sorted list of all the UDIDs in the profile. When it knows more about a specific UDID, it will allow you to display a pop-up to get more information about the device.
It is also an easy way to get access to other useful informations about the profile: creation and expiration date, App ID, profile name...
Download it here.
Another QuickLook plug-in I use is ProvisionQL.
https://github.com/ealeksandrov/ProvisionQL
It provides the QuickLook feature for provisioning profiles!
Check out more screenshots for how it work: https://github.com/ealeksandrov/ProvisionQL/blob/master/screenshots.md

Resources