Home
Developing
Learn how to develop by using the product.
Creating custom reports
In the Report Editor, you create report templates used to generate custom reports.
Generating custom reports
The procedures in this section's topics describe how to design and generate a report from an existing custom report. Alternatively, you can create a new report. To edit an existing report, open the report and follow the design, modification, and preview procedures.
Including categories in the report
Once you define the layout, determine the categories to include in the report.
Adding findings to a category

Developing
Learn how to develop by using the product.
- Scanning source code and managing assessments
  This section explains how to scan your source code and manage assessments.
- Triage and analysis
  Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
- AppScan® Source trace
  With AppScan® Source trace, you can verify input validation and encoding that meets your software security policies. You can look at the findings that produce input/output traces and mark methods as validation and encoding routines, sources or sinks, callbacks, or taint propagators.
- AppScan® Source for Analysis and defect tracking
  AppScan® Source for Analysis integrates with defect tracking systemsIBM® Rational Team Concert™ to deliver confirmed software vulnerabilities directly to the developer desktop. Defect submission to a defect tracking system contains a textual description of the bug and a file that contains only the findings submitted with the defect.
- Findings reports and audit reports
  Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
- Creating custom reports
  In the Report Editor, you create report templates used to generate custom reports.
  - Report Editor
    With the Report Editor, you can edit custom reports or templates or create a new report. Custom reports include any items that are available to a findings report, such as finding information, code snippets, AppScan® Source trace, and remediation content, as well as a vulnerability matrix. Before you start designing new reports, it is recommended that you become familiar with the report creation process by modifying an existing report template in the Report Editor.
  - Generating custom reports
    The procedures in this section's topics describe how to design and generate a report from an existing custom report. Alternatively, you can create a new report. To edit an existing report, open the report and follow the design, modification, and preview procedures.
    - Designing a report from an existing custom report
    - Including categories in the report
      Once you define the layout, determine the categories to include in the report.
    - Previewing the report
      When you design a custom report, you can preview it before generating the final report. In the Preview pane, click Preview to display the report for the currently opened assessment.
    - Saving the report template
      From the Report Editor view toolbar, you can click Save to preserve the current report template or Save As to save the current report template to a new file.

Adding findings to a category

Procedure

Open the findings view that contains the findings that you want to add. Select the findings that you want and drag them into the table of findings or to the node of the category tree in the Report Editor.
Alternatively, click Add findings on the toolbar above the findings table to include findings selected in other views. If you selected findings in multiple views, you must select the view that contains the findings added to the category.
Select the findings from any view that contains a findings table.