Home
Developing
Learn how to develop by using the product.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Working with bundles
Bundles (a grouping mechanism for findings) allow you to import a snapshot of findings from AppScan® Source for Analysis to AppScan Source for Development. Once findings are in bundles, you can use AppScan Source for Development to open the project that contains the bundle, import the bundle, or open a saved bundle file (file_name.ozbdl).
Creating bundles
Bundle creation occurs in the Bundles view or a view that contains a findings table. You can add findings to an existing bundle or a new bundle.

Creating bundles

Bundle creation occurs in the Bundles view or a view that contains a findings table. You can add findings to an existing bundle or a new bundle.

These topics describe bundle creation in the Bundles and Findings views:

Note: To be able to create bundles for an assessment, the application that was scanned to create the assessment must be loaded in AppScan® Source for Analysis. If you open an assessment for an application that is not loaded, bundle creation actions will not be available.

After you have created one or more bundles, the Findings view Hide Bundled Findings action ( Hide Bundled Findings icon ) allows you to toggle the display of bundled findings in the view. This action hides findings in all included bundles that you have created. This setting does not affect the display of findings in excluded bundles - these findings are never shown in the Findings view.