Welcome
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
Sample installation scenarios
When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
Loading the AppScan Source Podman image
In this scenario, the AppScan® Source command line interface (CLI) Podman image is downloaded and loaded into your Linux environment.

Welcome
Welcome to the documentation for HCL® AppScan® Source.
What's New
Explore new features added to AppScan® Source and note any features and capabilities deprecated in this release.
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
- System requirements and installation prerequisites
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
  - Installing all required components on one machine
    In this scenario, all components are installed on one machine. When configuring component connections, localhost settings are applied.
  - Installing AppScan® Source components in a multi-machine environment
    AppScan® Source components can be installed on multiple machines. In this scenario, components are deployed in a multi-machine environment. HCL® AppScan License Server, AppScan Enterprise Server, AppScan Source client products, and the AppScan Source Database are all installed on different machines.
  - Installing AppScan® Source and integrating it with an existing AppScan® Enterprise Server
    In this scenario, AppScan® Source components are installed on one machine and are configured to connect to an existing AppScan Enterprise Server.
  - Installing AppScan® Source in standalone mode
    In this scenario, all components are installed on one machine without a connection to AppScan® Enterprise or the AppScan Database Service.
  - Loading the AppScan Source Podman image
    In this scenario, the AppScan® Source command line interface (CLI) Podman image is downloaded and loaded into your Linux environment.
  - AppScan® Enterprise configuration
    With new installations of AppScan® Source version 10.0.2 and newer, you must configure AppScan Enterprise if you want to work in connected mode. These tasks need to be performed once.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure applications, folders, and projects, and set attributes and properties in HCL® AppScan® Source.
Administering
Learn how to administer user accounts and permissions, audit user activity, and manage integrations in HCL® AppScan® Source.
Scanning
This section explains how to scan your source code and manage assessments in HCL® AppScan® Source.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Reporting
Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
Extending product function
Learn how to extend the product to meet specific development requirements.
Reference
Review reference information for HCL® AppScan® Source, including using utilities, plug-ins, and APIs.
Troubleshooting and support
Self-help information, resources, and tools to help you troubleshoot issues while using HCL® AppScan® Source.

Loading the AppScan Source Podman image

In this scenario, the AppScan® Source command line interface (CLI) Podman image is downloaded and loaded into your Linux environment.

Containerized applications, including AppScan® Source, allow greater flexibility and efficiency. Once installed and configured, a testing environment can be created on-demand, and quickly, and scans can be run concurrently.

Note: Podman must be installed, and the daemon started and running with the current user added to the podman group.

To download and load the Podman image to your environment from the My HCLSoftware portal:

Login to the My HCLSoftware portal.
Download hcl_appscan_source_cli_10.1.0.tar.gz from the My HCLSoftware portal.
Load the Podman image:
podman load –i hcl_appscan_source_cli_10.1.0.tar
Verify that the Podman image is loaded and available:
podman images
An image with the name appscan/appscan-src-cli should be listed.

To pull the Podman image from HCL Harbor to your environment:

Pull the Podman image from HCL Harbor:
podman pull hclcr.io/appscan/appscan-src-cli:10.1.0
Verify the Podman image is loaded and available.
podman images
An image with the name appscan/appscan-src-cli should be listed.

Note: As of version 10.3.0, AppScan® Source supports containerization using Podman. Since Docker is not supported in Red Hat Enterprise Linux 8 and 9, use Podman if your host is running RHEL 8 or 9. Podman supports all major Docker commands; replace Docker with Podman in the examples in this topic to create containers and scan in the Podman environment.