SAST Risks

The Risks (SAST) page can be accesed by selecting the SAST option in the Risks tab. This tab offers an in-depth overview of all SAST security issues, clearly presented for ease of assessment.

Xygeni provides two functionalities related to SAST scanning

1. Xygeni provides a SAST Scanner that can perform static analysis over your application code. Please visit Xygeni SAST Scanner for further information.

2. Xygeni also provides the functionality to import scan results from 3rd-party tools. This way, you can integrate 3rd-party data into Xygeni and benefit from the Xygeni ASPM functionalities. The supported SAST scanners are listed in the supported SAST scanners section.

By default, this page will display all the SAT issues, regardless of the tool that found the issues (Xygeni SAST Scanner or any other 3rd party tool).

If you click on More filter fields, you can find the Tools filter where you can select a tool and only those issues reported by the selected tool will be displayed.

You can reach the Risks (SAST) results under Code Security >> Risks (SAST) section.

In the issues table, by clicking on the icon of any issue, you will see the details of the issue.