Known issues in HCL AppScan 360°

Known issues in releases, and workarounds when applicable.

Known issues in AppScan 360° version 1.2.0

Known issues in AppScan Central Platform
  • On some installations, regulatory and compliance reports generate without any issues.

    To resolve the issue, restart the pod that starts with ascp-mr-tasks-manager for the scheduler to refresh the data for the report. In most cases the reports start to function after 20 minutes, but occasionally it may take up to 24 hours.

  • When working with scan results, clearing filters using the Clear option in the Filters dialog box removes all issues.
  • When attempting to generate a security report for a filtered list of fix groups, the report may fail to generate.
  • If you deploy a scan, but there are insufficient resources to run the scan, the scan may stall and not progress, even while showing at state of "Running" in AppScan Central Platform.
    Check the status of the scan in the K8S cluster. The status of the scan (name starting with sast-job-) may be "Pending". In this instance you can either:
    • Wait for other scans to finish and resources to free up. The Running/Pending scan will proceed when sufficient resources are available.
    • Add more resources and redeploy the scan.

Known issues in AppScan 360° version 1.1.0

Known issues in AppScan Central Platform

  • On some installations, regulatory and compliance reports generate without any issues.

Known issues in AppScan 360° Static Analysis

  • Upgrading from AppScan 360° version 1.0.0 fails.

    Error:

    Deployment fails during upgrade due to failure to upgrade the version of RabbitMQ:
    • Feature flags: classic_mirrored_queue_version: required feature flag not enabled! It must be enabled before upgrading RabbitMQ.
    • Failed to initialize feature flags registry: {disabled_required_feature_flag, classic_mirrored_queue_version}
    Root cause

    Version 1.0.0 of AppScan 360° Static Analysis uses version 3.11.10 of RabbitMQ, which has since been upgraded. When an existing deployment of AppScan 360° Static Analysis version 1.0.0 is upgraded with AppScan 360° Static Analysis version 1.1.0 or later, the deployment fails until featureflags are enabled to allow upgrade of RabbitMQ.

    Solution

    Before upgrading, manually enable featureflags in the RabbitMQ pod:
    1. Open a shell into the active and running RabbitMQ pod
    2. Run the command rabbitmqctl enable_feature_flag all.
    3. Deploy AppScan 360° Static Analysis to upgrade .

    Alternatively, uninstall AppScan 360° Static Analysis version1.0.0 and perform a fresh install of AppScan 360° Static Analysis version 1.1.0