Home
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
Sample installation scenarios
When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
Loading the AppScan Source Docker image
In this scenario, the AppScan® Source command line interface (CLI) Docker image is downloaded and loaded into your Linux environment.

Welcome
Welcome to the documentation for HCL® AppScan® Source.
What's New
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
- System requirements and installation prerequisites
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
  - Installing all required components on one machine
    In this scenario, all components are installed on one machine. When configuring component connections, localhost settings are applied.
  - Installing AppScan® Source components in a multi-machine environment
    AppScan® Source components can be installed on multiple machines. In this scenario, components are deployed in a multi-machine environment. HCL® AppScan License Server, AppScan Enterprise Server, AppScan Source client products, and the AppScan Source Database are all installed on different machines.
  - Installing AppScan® Source and integrating it with an existing AppScan® Enterprise Server
    In this scenario, AppScan® Source components are installed on one machine - and they are configured to connect to an existing AppScan Enterprise Server.
  - Installing AppScan® Source in standalone mode
    In this scenario, all components are installed on one machine without a connection to AppScan® Enterprise or the AppScan Database Service.
  - Loading the AppScan Source Docker image
    In this scenario, the AppScan® Source command line interface (CLI) Docker image is downloaded and loaded into your Linux environment.
  - AppScan® Enterprise configuration
    With new installations of AppScan® Source version 10.0.2 and newer, you must configure AppScan Enterprise if you want to work in connected mode. These tasks need to be performed once.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure applications, folders, and projects, and set attributes and properties in HCL® AppScan® Source.
Administering
Learn how to administer user accounts and permissions, audit user activity, and manage integrations in HCL® AppScan® Source.
Scanning
This section explains how to scan your source code and manage assessments in HCL® AppScan® Source.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Reporting
Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
Extending product function
Learn how to extend the product to meet specific development requirements.
Reference
Review reference information for HCL® AppScan® Source, including using utilities, plug-ins, and APIs.
Troubleshooting and support
Self-help information, resources, and tools to help you troubleshoot issues while using HCL® AppScan® Source.

Loading the AppScan Source Docker image

In this scenario, the AppScan® Source command line interface (CLI) Docker image is downloaded and loaded into your Linux environment.

Containerized applications, including AppScan® Source, allow greater flexibility and efficiency. Once installed and configured, a testing environment can be created on-demand, and quickly, and scans can be run concurrently.

Note: Docker must be installed, and the daemon started and running with the current user added to the docker group.

To download and load the Docker image to your environment from HCL Software License & Delivery Portal:

Login to HCL Software License & Delivery Portal.
Download hcl_appscan_source_cli_10.1.0.tar.gz from the HCL Software License & Delivery Portal.
Load the Docker image:
docker load –i hcl_appscan_source_cli_10.1.0.tar
Verify that the Docker image is loaded and available:
docker images
An image with the name appscan/appscan-src-cli should be listed.

To pull the Docker image from HCL Harbor to your environment:

Pull the Docker image from HCL Harbor:
docker pull hclcr.io/appscan/appscan-src-cli:10.1.0
Verify the Docker image is loaded and available.
docker images
An image with the name appscan/appscan-src-cli should be listed.