HCL Appscan360 (Appscan360) - Overview
The HCL Appscan360 (Appscan360) plug-in allows for integration with the HCL Appscan360 server. This plug-in uses the Appscan360 REST interface to interact with the HCL Appscan360 application. Data is gathered from the Appscan360 server and displayed as a graphical view in the DevOps Velocity portfolio.
Compatibility
Must be running DevOps Velocity version 5.2.5 and later to use this plug-in. The table below lists the compatible versions of the HCL Appscan360 plug-in and HCL DevOps Velocity:
| DevOps Velocity Version | HCL Appscan360 Plug-in Versions |
|---|---|
| 5.3.0 or later | 1.0.5 |
| 5.2.5 or later | 1.0.2 |
Versions
DevOps Velocity plug-in images are located in DockerHub. To view available versions, see the UrbanCode DockerHub.
History
Version 1.0.5
- Implemented support for SAST gating and SCA and IAST scan data ingestion from AppScan 360. Scan results are fetched and displayed as metrics within Velocity using dot indicators. IAST scan data is displayed only on the Insights page.
- Software Composition Analysis - Displays SCA scan results.
- Interactive Application Security Testing - Displays IAST scan results.
Version 1.0.2
- Implemented support for SAST and DAST scan data ingestion from Appscan360. Scan results are fetched and displayed as metrics within Velocity using dot indicators.
Insights Metrics
- Appscan360 Static Scan – Displays SAST scan results.
- Appscan360 Dynamic Scan – Displays DAST scan results.