Home
Installation
Learn how to install the AppScan Central Platform and AppScan 360° Static Analysis.
AppScan 360° Static Analysis
Static analysis has changed: what was once a security tool is now a core development application. That evolution called for an evolution in the technology. AppScan 360° Static Analysis (AppScan 360° SAST) is a micro-services based, Kubernetes-managed environment that provides static analysis scanning capability in AppScan 360°. AppScan Central Platform (ASCP) communicates with AppScan 360° Static Analysis to execute scans submitted by the end users.
Deploying AppScan 360° Static Analysis clusters
Configuring AppScan 360° Static Analysis deployment

Getting started
Welcome to the documentation for HCL AppScan 360°, where you can find information about how to install, maintain, and use this service.
Installation
Learn how to install the AppScan Central Platform and AppScan 360° Static Analysis.
- AppScan Central Platform
  The AppScan Central Platform is the foundation of HCL AppScan 360°.
- AppScan 360° Static Analysis
  Static analysis has changed: what was once a security tool is now a core development application. That evolution called for an evolution in the technology. AppScan 360° Static Analysis (AppScan 360° SAST) is a micro-services based, Kubernetes-managed environment that provides static analysis scanning capability in AppScan 360°. AppScan Central Platform (ASCP) communicates with AppScan 360° Static Analysis to execute scans submitted by the end users.
  - About the runtime environment
  - Roles and workflows
  - System requirements for AppScan 360° Static Analysis
    This section describes required operating systems and supporting technology for downloading and deploying AppScan 360° Static Analysis. Additional information on setting up required components can be found here.
  - Setting up the AppScan 360° Static Analysis environment
    Before installing AppScan 360° Static Analysis, setup your environment for optimal deployment.
  - Downloading AppScan 360° Static Analysis
  - Deploying AppScan 360° Static Analysis clusters
  - Logging
  - Troubleshooting AppScan 360° Static Analysis deployment
Administration
Define users, applications, policies, and configure DevOps integrations.
Navigation
This section describes the items on the main AppScan 360° menu bar, with links to more detailed information.
Static analysis
Use static analysis (SAST) to scan for security vulnerabilities in web and desktop applications. Static analysis includes Intelligent Finding Analytics (IFA) and Intelligent Code Analytics (ICA).
Results
The Scans and Sessions page lists scans under the categories where you can view your scan results, including scan statistics. To view, rescan, or download reports, select a scan.
Reference
Some frequently asked questions, and information about integrating AppScan 360° into the product lifecycle (SDLC).

Configuring AppScan 360° Static Analysis deployment

Configuring auto-scaling replica count

To configure the maximum number of instances to auto-scale preparer, analyzer, and ascp-adapter, add these properties in the customized values file:

> global:
  <component-name>:
    common:
      hpa:
        maxReplicaCount: 10

Configuring storage

You can configure storage size in the values.yaml:

global:
  storage:
    pvc:
        storage: <storage-size>
    pvcLogs:
        storage: <storage-size>

For more details on configurable options for storage, see the values.yaml file:

For Harbor, see Projects > appscan360-sast/sast-service/sast-service-core > values
For archive files, see helm/sast-service-core/values.yaml