IBM AppScan

IBM AppScan scanner

RegScale can also import flat file reports from IBM AppScan

This CLI is able to sync assets and vulnerabilities from a folder containing IBM AppScan csv files.

Processing Workflow

The CLI will process each file and load assets and vulnerabilities to RegScale.

• The user first logs into RegScale via the CLI to set the access token or otherwise creates a service account as described in the CLI Login documentation
• The user provides the RegScale SSP ID# and the folder path to the files.
• ibm import_appscan - The primary function of this integration, parse and load data to RegScale.

Required parameters

• regscale_ssp_id The ID number from RegScale of the System Security Plan, required.
• folder_path The full folder path where the files are located.
• scan_date The date of the scan to be imported

The CLI provides detailed logging throughout the process to indicate progress and to provide troubleshooting in case of issues.

File Format

Below are the expected columns of an IBM AppScan file:

Header Name	Required
Status
Severity
Issue Type
URL	Yes
Tested Element
Entity Type

Example Commands

Import scans to SSP #16 in RegScale using the files located in the scans folder.

• regscale ibm import_appscan --regscale_ssp_id 16 --folder_path /home/$USER/Documents/scans --scan_date 2024-01-01

📘

NOTE: See All Scanner Integrations for information about how this updates Issues/POAMs