Risks (SAST)

The Risks (SAST) page provides a comprehensive view of all the SAST security issues at a glance.

Xygeni provides two functionalities related to SAST scanning

1. First, Xygeni provides a SAST Scanner that performs a static analysis over your application code. Please see Xygeni SAST Scanner for further information.

2. Second, Xygeni also provides the functionality to import scan results from 3rd party tools. This way, you can integrate 3rd party data into Xygeni and benefit from Xygeni ASPM functionalities. The supported SAST scanners are listed in the supported SAST scanners section.

You can reach SAST results under Code Security >> Risks (SAST) section.

By default, this page will display all the SAT issues, regardless the tool that found the issues (Xygeni SAST Scanner or any other 3rd party tool).

If you click on More filter fields, you can find the Tools filter where you can select a tool and only those issues reported by the selected tool will be displayed.

In the issues table, by clicking on the icon of any issue, you will see the details of the issue.