Single scan view

This view collects data for a specific DAST, SAST, or SCA scan, including all executions of the scan.

The individual scan page can be opened in two ways:
  • Applications > Application > View all scans > scan page
  • Scans > scan page
The tabs available depend on the scan technology. For SCA scans, select Dependencies to view dependency relationships for the selected execution.

General

The upper area shows the scan name and Manage scan drop-down (including but not limited to options: Rescan, Download log, Edit configuration, Add schedule, Rename, Delete). Select the specific execution of the scan to view from a drop-down list by date.

Overview

For the selected scan execution, this tab displays:
  • Details: Status, start and end dates, scanned by, and duration and number of new and active issues.
  • Coverage: Number of visited pages and tested elements
  • Issues by Severity chart
  • Execution log
    Note:
    The log pane shows only the latest section of the log. To see the whole log, click the Download link.
Possible scan statuses are:
  • Configuration saved: The scan has been configured but not yet started by the user.
  • Queued: You started the scan, but it is not yet running due to the limit on the number of concurrent scans. It will run as soon as allowed by your subscription.
  • Initialized: You started the scan and it will start running within a few seconds.
  • Running: Scan in progress.
  • Pausing/Paused: You paused the scan. Click Resume to continue.
  • Under review: The scan configuration requires review my our support team and will continue when this has been done.
  • Completed: Scan completed successfully.
  • Failed: Scan failed.

Issues

For the selected scan execution, this tab displays a list of all active and non-complaint issues by default. Filters are available, and the columns shown can be selected from the drop-down list.

Fix groups

For the selected scan execution, this tab displays the fix groups for the issues found.

Dependencies (SCA only)

The Dependencies tab shows a graph of projects, libraries, and their dependency relationships for the selected SCA scan execution. A direct dependency is a library used directly by a project; a transitive dependency is used through another library. The graph includes libraries regardless of whether security issues have been identified for them.

  1. Open an SCA scan and select the execution to inspect.
  2. Select Dependencies.
  3. Use the Direct dependency and Transitive dependency legend controls to hide or show the corresponding libraries. A control appears only when that dependency type is present.
  4. To find a library, enter its name or version in the search field. Matching libraries and their related paths are highlighted. Clear the search to remove the search highlighting.
  5. Select a project or library node to view its name, version when available, and project paths.
Note:
The graph depends on the relationship data available for that execution. If the execution has no dependency relationship data, No dependencies detected is displayed. While a scan is pending or running, the graph may be updated after the scan completes.

If Dependency graph unavailable is displayed, the dependency data could not be loaded. Reload the page to try again.

To save a copy of the graph, take a screenshot. Direct image export is not supported.

For dependency information associated with an individual SCA issue, see the Library tab in the Issue information pane.

Configuration

For the selected scan execution, this tab displays (where applicable):
  • Execution and scan IDs
  • URL (where the scan started) and domains
  • Login type
  • Explore type (automatic or guided)
  • Network type (public or private)
  • Test options (optimization and policy used)
  • Scan options