Application landing page

Overview

The Application landing page is the main page displayed immediately after logging in to CAST Imaging. It lists all applications that have already been onboarded (or are in the process of being onboarded) and which the current logged in user has permission to interact with (see User Permissions ). It also provides an option to onboard new applications:

What does the Add an application button do?

The large blue button in the top right corner (if you do not see this button, your user login does not have sufficient permission) allows you to create a brand new application in CAST Imaging and kick-off the application onboarding process. Clicking the button will give you the option to either:

• Onboard a new application for deep code analysis and result generation
• Import an application view i.e. import only analysis results in ZIP file format - results generated in previous releases of CAST Imaging Viewer (for example using the etl-automation tool) can be uploaded

What do the application statuses mean?

The Status column indicates the current “state” of a given application in CAST Imaging. For example:

• Ready to view indicates that the deep analysis and result generation process has completed successfully and results can be accessed.
• Actions pending usually indicates that the initial fast scan has completed, but the deep analysis and result generation process has not yet been actioned.
• In progress indicates that either an initial fast scan or a deep analysis is currently on-going.
• Requires attention indicates that there may be an issue with the current application (for example the analysis failed) that requires manual intervention.
• Deleting indicates that the current application is in the process of being removed (only users with the Administrator role can perform this action).

How do I access results or application configuration?

Each application listed in the landing page is clickable:

Depending on the status of the application, the action of clicking the row will give different results:

• Status = Ready to view: access the most recent analysis results
• Status = Actions pending, Requires attention, In progress: a dialog is displayed explaining the current status and how to proceed. If there are existing results, you will be optionally directed to them.

What do the application size indicators mean?

Applications are categorized by size (Small, Medium, Large, XLarge, XXLarge, XXXLarge) according to the number of lines of code calculated by CAST Imaging during the initial fast scan process. Files that are not considered source code (i.e. image files for example) are not included in this value.

What does the icon in the Name column indicate?

When an icon is visible in the Name column as shown in the image below, this indicates that only the application’s analysis results are available for viewing. In other words the results have been uploaded via a results ZIP file using the Add an application > Import an application view option and there is no possibility to configure any analysis options:

How do I use the Actions menu?

The Actions menu provides additional options for each application:

New scan

This option is to be used when you have updated application source code and you want to run a new analysis using this updated source code. The option will prompt you to upload a new ZIP file or choose from a source code folder (you will only be offered the option that was used for the initial application onboarding), and then you can proceed as with a first time analysis: fast scan, start analysis process and check results.

Analysis configuration

This option directs you to the “Overview” panel where you can check the results of the initial Fast Scan process. Other panels are available allowing you to:

• view logs
• manage extensions that will be or have been used in the analysis process
• make advanced changes to the analysis configuration
• check transaction and function point information (available with appropriate CAST licenses only)
• configure security dataflow analyses (available with appropriate CAST licenses only)
• check snapshot configuration

Customize results

This option focuses on managing your application analysis results (the option is not available if an analysis has not successfully completed) and allows you to:

• hide specific “level 5” nodes from the results (this is useful if these nodes are technically irrelevant and are “polluting” the results).
• add annotations and/or tags in bulk

Engineering Dashboard

This option launches the Engineering Dashboard (available with appropriate CAST licenses only) allowing you to investigate the application from a quality rule perspective (based on the results of quality rules triggered during the analysis):

• application risk
• transaction risk

Rename / delete

These two options provide quick access to options that are otherwise provided in the admin settings . They both require a user login with the following permissions , otherwise they are disabled:

• the Admin predefined profile
• or the Application Creator predefined profile
• or a custom profile containing the Application Owner role and permission over the given application/domain (or all applications/domains)