AppScan® Source Data Access API

The Data Access API provides access to AppScan® Source-generated assessment results, including findings and finding details. It also provides access to assessment metrics such as analysis date and time, lines of code, V-density, and number of findings.

The Data Access API is included with the installation of these AppScan® Source components:

  • AppScan® Source for Analysis
  • AppScan® Source command line interface (CLI)

The Data Access API is installed as <install_dir>\sdk\ouncesdk.jar on Windows and <install_dir>/sdk/ouncesdk.jar on Linux (where <install_dir> is the location of your AppScan® Source installation).

The Data Access API requires JDK 11 or later.

On Windows: When running a program that uses the SDK, specify these Java Virtual Machine (JVM) arguments on the command line:

java -classpath 
<install_dir>\lib\avalon-framework-4.1.5.jar;
<install_dir>\lib\commons-lang3-3.3.2.jar;
<install_dir>\lib\icu4j-52_1.jar;
<install_dir>\lib\jacorb.jar;
<install_dir>\lib\log4j-api-2.17.1.jar;
<install_dir>\lib\log4j-core-2.17.1.jar;
<install_dir>\lib\logkit-1.2.jar;
<install_dir>\sdk\ouncesdk.jar;
<install_dir>\lib\xml-apis.jar;
<install_dir>\lib\saxon9.jar
<install_dir>\lib\j11_lib*
... com.company.product.ClassName

On Linux: When running a program that uses the SDK, specify these Java Virtual Machine (JVM) arguments on the command line:

java -classpath 
<install_dir>/lib/avalon-framework-4.1.5.jar:
<install_dir>/lib/commons-lang3-3.3.2.jar:
<install_dir>/lib/icu4j-52_1.jar:
<install_dir>/lib/jacorb.jar:
<install_dir>/lib/log4j-api-2.17.1.jar;
<install_dir>/lib/log4j-core-2.17.1.jar;
<install_dir>/lib/logkit-1.2.jar:
<install_dir>/sdk/ouncesdk.jar:
<install_dir>/lib/xml-apis.jar:
<install_dir>/lib/saxon9.jar
<install_dir>/lib/j11_lib/*
... com.company.product.ClassName