Home
Developing
Learn how to develop by using the product.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Triage with exclusions
After a scan, you may decide that some findings are irrelevant to your current work, and you do not want them visible in the findings table when you triage the scan results. These exclusions (or excluded findings) no longer appear in the Findings view and the assessment metrics update immediately with the changed results. Filter and bundle exclusions added to a configuration only take effect on subsequent scans.
The scope of exclusions
Exclusions apply to all applications (global), individual applications, or projects.

The scope of exclusions

Exclusions apply to all applications (global), individual applications, or projects.

Global exclusions apply to all scans.
Application exclusions only apply to a scan run against a specific application and its corresponding projects.
Project exclusions apply to findings that exist in a specific project.

Note: Exclusions affect assessment metrics, including total findings (findings that are excluded are not included in assessment metrics).

Global Exclusions

You can store or access a global exclusion from any AppScan® Source for Analysis application - and these exclusions apply to all scans. Only shared filters may become global filters.

Application and Project Exclusions

Bundle exclusions apply only to an application. A filter exclusion may apply to an application or project. Exclusions that are applied to applications and projects can be shared or local.