The classes and methods offered in these APIs allow you to account for frameworks for which built-in support is not provided. The Automation Server allows you to queue requests to scan and publish assessments, and generate reports on the security of application code.ĪppScan® Source provides a set of Java™ APIs that allow you to add support for frameworks that are used in your applications.

The Automation Server ( ounceautod) allows you to automate key aspects of the AppScan® Source workflow and integrate security with build environments during the software development life cycle (SDLC). Specify the Ounce/Maven goals and parameters as you would for any other Maven plugin. The Ounce/Maven plug-in allows you to use Ounce/Maven to create AppScan® Source projects and applications, scan the applications, publish the resulting assessments, and generate AppScan Source reports. This section describes the Ounce/Maven plug-in, which uses Maven, an Apache build tool, to integrate AppScan® Source into the Maven workflow. It also provides access to assessment metrics such as analysis date and time, lines of code, V-density, and number of findings. The Data Access API provides access to AppScan® Source-generated assessment results, including findings and finding details. Integrating Ounce/Ant with your Ant environment helps you automate builds and code assessments. This section describes how to use Ounce/Ant, an AppScan® Source build utility that integrates AppScan Source and Apache Ant. The CLI is an interface to core AppScan® Source functionality.

AppScan Source command line interface (CLI).

Ounce/Make eliminates the need to import configuration information from makefiles manually. Ounce/Make is a tool that automates the importing of configuration information into AppScan® Source from build environments that use makefile. Review reference information for the product. Learn how to develop by using the product. Learn general information about the product. Whether a security analyst, quality assurance professional, developer, or executive, the AppScan Source products deliver the functionality, flexibility, and power you need - right to your desktop. HCL® AppScan® Source delivers maximum value to every user in your organization who plays a role in software security.

Security AppScan Source - Windows and Linux.

How to install maven plugin