CAST Engineering Dashboard - Violations on Documentation - V2

CAST Engineering Dashboard - Violations - How to reset violation status

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

This page provides a methodology on how to reset violation status in certain cases. A screenshot of violation status before running the steps in this page is shown here:

Here is a screenshot that shows the status after running the steps

Observed in CAST AIP

Release	Yes/No
8.3.x	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step scenario

It is currently unclear about the steps that lead to this situation. It was noticed in a dashboard but the steps done prior to the issue were not provided.

CAST Engineering Dashboard - Violations - Incorrect Violation Status

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

This page explains the case when the violation status changed between snapshots while the source code is UNCHANGED.

Observed in CAST AIP

Release	Yes/No
8.3.x	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step scenario

Compute at least 2 snapshots
Launch CED
Read violation status

Action Plan

Read the violation status, for more information about the violation status refer to Violation List
1. If the violation status is A****dded
  1. Read the object status of the violated object (refer to the screenshot in the purpose) for more information about the object status refer to Violation List

CAST Engineering Dashboard - Violations - Number of All violations is not equal to the latest violations

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

This page troubleshoots issue when the number of all violation is not equal to the number of latest violation in the Vendors - Deliverables Acceptance View.

For more information on this view refer to - Vendors - Deliverables Acceptance

Observed in CAST AIP

Release	Yes/No
8.3.x	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step scenario

Launch CAST Engineering Dashboard
Navigate to Vendors - Deliverables Acceptance View
Observe that the number of all violation is not equal to the number of latest violation

Action Plan

CAST Engineering Dashboard - Violations - Variation in Critical Violations value

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

This page describes how to investigate differences in the number of critical violations between two snapshots when the source code does not change between two versions.

Observed in CAST AIP

Release	Yes/No
8.3.x	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step scenario

Take at least 2 snapshots.
Open CED.
Observe that the number of critical violations is not the same between the 2 latest snapshots.

Action Plan

CAST Engineering Dashboard - Violations - Duplicate Violation Details - Multiple display of violation status in the Violation Info tab

Mon, 01 Jan 0001 00:00:00 +0000

Problem

Violation status is displayed multiple times for all the metrics in Violation Info as added,added,added,added. Please see the below screenshot

Description

The violation status is displayed multiple times because there exists duplicate values in the dss_violation_statuses table.

The result of below query ran on Central repository shows that there are duplicates :

select SNAPSHOT_ID,
DIAG_ID,
OBJECT_ID, count(1)
from DSS_VIOLATION_STATUSES
group by SNAPSHOT_ID, DIAG_ID, OBJECT_ID
having count(1) > 1
order by SNAPSHOT_ID, DIAG_ID, OBJECT_ID;

Observed in CAST AIP

CAST Engineering Dashboard - Violations - Wrong involved objects in path - List of involved objects in Path is empty for QR Avoid Too Many Copy Pasted Artifacts

Mon, 01 Jan 0001 00:00:00 +0000

Description

In the quality model drill down, the list of involved objects in Path is empty for QR: Avoid Too Many Copy Pasted Artifacts.

When you are expecting to see the list of objects containing copy-pasted source code

Observed in CAST AIP

Release	Yes/No
8.3.x	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step Scenario

Generate a snapshot on an application.
Connect to the quality model drill down.
Go to quality rule “Avoid Too Many Copy Pasted Artifacts” underTechnical Creteria “Architecture-Reuse” underBusiness Criteria “Total Quality index”.
Go to the bottom right to see the “Involved Objects: The list of “Involved Objects” is empty.

CAST Engineering Dashboard - Violations - Wrong violation for added method to user Input Data Flow Security Analysis

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

In User Input Security tab of CAST-MS, we activate user Input Data Flow Security Analysis (.NET or J2EE), and we add specific method (sanitization, user input method or target method), for more information, please visit the page User Input Security - Adding Application Specific Input or Target Methods

In Dashboard the specific method appear as violation (security vulnerabilities) while it’s should not.

That can be due to the fact that analyzer have not detect an external method on the data flow engine’s deductions. An external code is unknown and cannot be accessed by the analyzer, and as such is not taken into account by the User Input feature.