title: Can I run fortify on .jar files instead of .java?
body: <p>I need to check vulnerabilities (if any) in the third party libraries that are being used in my project using Fortify.</p>
  
  <p>For a few third party libraries, I am not able to access their source files. I only have the shipped .jar files.</p>
  
  <p>Is it possible to run Fortify on .jar files instead ? All I could find in most of the documentations was that Fortify can be run on .java files, something like this:</p>
  
  <p>sourceanalyzer -b MyProject -cp "lib/<em>.jar" "src/</em>*/*.java"</p>