Home
Developing
Learn how to develop by using the product.
Creating custom reports
In the Report Editor, you create report templates used to generate custom reports.
Generating custom reports
The procedures in this section's topics describe how to design and generate a report from an existing custom report. Alternatively, you can create a new report. To edit an existing report, open the report and follow the design, modification, and preview procedures.
Saving the report template
From the Report Editor view toolbar, you can click Save to preserve the current report template or Save As to save the current report template to a new file.

Developing
Learn how to develop by using the product.
- Scanning source code and managing assessments
  This section explains how to scan your source code and manage assessments.
- Triage and analysis
  Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
- AppScan® Source trace
  With AppScan® Source trace, you can verify input validation and encoding that meets your software security policies. You can look at the findings that produce input/output traces and mark methods as validation and encoding routines, sources or sinks, callbacks, or taint propagators.
- AppScan® Source for Analysis and defect tracking
  AppScan® Source for Analysis integrates with defect tracking systemsIBM® Rational Team Concert™ to deliver confirmed software vulnerabilities directly to the developer desktop. Defect submission to a defect tracking system contains a textual description of the bug and a file that contains only the findings submitted with the defect.
- Findings reports and audit reports
  Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
- Creating custom reports
  In the Report Editor, you create report templates used to generate custom reports.
  - Report Editor
    With the Report Editor, you can edit custom reports or templates or create a new report. Custom reports include any items that are available to a findings report, such as finding information, code snippets, AppScan® Source trace, and remediation content, as well as a vulnerability matrix. Before you start designing new reports, it is recommended that you become familiar with the report creation process by modifying an existing report template in the Report Editor.
  - Generating custom reports
    The procedures in this section's topics describe how to design and generate a report from an existing custom report. Alternatively, you can create a new report. To edit an existing report, open the report and follow the design, modification, and preview procedures.
    - Designing a report from an existing custom report
    - Including categories in the report
      Once you define the layout, determine the categories to include in the report.
    - Previewing the report
      When you design a custom report, you can preview it before generating the final report. In the Preview pane, click Preview to display the report for the currently opened assessment.
    - Saving the report template
      From the Report Editor view toolbar, you can click Save to preserve the current report template or Save As to save the current report template to a new file.

Saving the report template

From the Report Editor view toolbar, you can click Save to preserve the current report template or Save As to save the current report template to a new file.

If you save the report template to the same directory as an application file (.paf or .gaf), it becomes available in the list of options in the Custom Report wizard and in the Report Editor view for use in subsequent scans of that application. If you save it to <data_dir>\reports (where <data_dir> is the location of your AppScan® Source program data, as described in Installation and user data file locations), it is available for scans of any application.