The widgets in this category return static analysis results from Parasoft testing and code analysis tools, i.e., : C/C++test, dotTEST, and Jtest. Multiple Multiple occurrences of a violation detected and reported by the tools are recognized as the same violation throughout the development lifecycle and is displayed in a Compliance widget as such.
In this chaptersection:
| Table of Contents | ||
|---|---|---|
|
...
A compliance category is a group of static analysis rules that enforce a specific concept in a compliance standard. For example, the OWASP Top 10 standard contains a compliance category called "A1 - Injection." Parasoft enforces each category with one or more static analysis rules. DTP ships with compliance configurations for several standards. You can also install and deploy additional artifacts to your DTP infrastructure to monitor compliance with other standards. The configurations display static analysis data according to each standardsstandard's compliance categories.
Categories - Top 5 Table
This widget shows the five compliance categories in the selected compliance configuration with the most violations. See About Compliance Categories for information about compliance categories in DTP.
| Excerpt Include+ | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Widget Configuration
| Scroll Table Layout | ||
|---|---|---|
|
Title | Enter a new title to replace the default title that appears on the dashboard. |
|---|---|
| Filter | Choose Dashboard Settings to use the dashboard filter or choose a filter from the drop-down menu. |
| Compliance | Choose a group of compliance categories from the drop-down menu. Compliance categories are driven by test configurations and their associated rule maps. See Rule Maps for additional information. |
| Target Build | Choose Dashboard Settings or a specific build from the drop-down menu. The data from the selected build will be rendered in the widget. |
...
| Code Block | ||
|---|---|---|
| ||
"name": "categories", "type": "native", "uuid": "76c7e2ae-7618-11e6-8b77-86f30ca893d3" |
Compliance By Category
Excerpt Include+
This widget provides an overview of the compliance status for each category in the compliance configuration. The first column shows the name of the compliance category. The column labeled "Passed/# of Rules Rules" shows the total number of Parasoft static analysis rules that were enabled in each category and how many rules do not have violations ("passed"). The widget also renders a chart with color-coded areas that provide an at-a-glance overview of compliance status:
...
See About Compliance Categories for information about compliance categories in DTP.
| Excerpt Include+ | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Widget Configuration
| Scroll Table Layout | ||
|---|---|---|
|
Title | Enter a new title to replace the default title that appears on the dashboard. |
|---|---|
| Filter | Choose Dashboard Settings to use the dashboard filter or choose a filter from the drop-down menu. |
| Compliance | Choose a compliance category from the drop-down menu. Compliance categories are driven by test configurations and their associated rule maps. See Rule Maps for additional information. |
| Target Build | Choose a build from the drop-down menu to serve as the current data for comparison. |
...
Compliance by Category/Severity
Excerpt Include+
This widget shows the number of rules that were enabled during analysis that are in compliance. The rules are grouped by rule category and broken down by severity. See About Compliance Categories for information about compliance categories in DTP.
| Excerpt Include+ | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Widget Configuration
| Scroll Table Layout | ||
|---|---|---|
|
Title | Enter a new title to replace the default title that appears on the dashboard. |
|---|---|
| Filter | Choose Dashboard Settings to use the dashboard filter or choose a filter from the drop-down menu. |
| Compliance | Choose a compliance category from the drop-down menu. Compliance categories are driven by test configurations and their associated rule maps. See Rule Maps for additional information. |
| Target Build | Choose a build from the drop-down menu to serve as the current data for comparison. |
...
| Code Block | ||
|---|---|---|
| ||
"name": "compliance_by_category_and_severity", "type": "native", "uuid": "e45c70c0-7ba2-11e6-8b77-86f30ca893d3" |
Rules - Top 5 Table
This widget shows the five rules with the most violations.
| Excerpt Include+ | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Widget Configuration
| Scroll Table Layout | ||
|---|---|---|
|
Title | Enter a new title to replace the default title that appears on the dashboard. |
|---|---|
| Filter | Choose Dashboard Settings to use the dashboard filter or choose a filter from the drop-down menu. |
| Target Build | Choose a build from the drop-down menu. Only the data in this build will display be shown in the widget. |
| Compliance | Choose a compliance category from the drop-down menu. Compliance categories are driven by test configurations and their associated rule maps. See Rule Maps for additional information. |
| Severity | Choose a severity level from the drop-down menu. |
Actions
Click on a rule ID in the widget to open the Violations Explorer filtered by the selected rule. See Violations Explorer.
...
Rules in Compliance - Summary
| Excerpt Include+ | ||||||||
|---|---|---|---|---|---|---|---|---|
|
This widgets This widget shows the following information:
- how How many static analysis rules for the selected compliance standard were enabled during code analysis.
- how How many violations were reported.
- the The overall percentage of rules that did not report violations.
- the The change in number of violations from the baseline build to the target build as a percentage (if applicable).
For 100% compliance, the code must not violate any of the static analysis rules used in the project.
| Excerpt Include+ | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Widget Configuration
| Scroll Table Layout | ||
|---|---|---|
|
Title | Enter a new title to replace the default title that appears on the dashboard. |
|---|---|
| Filter | Choose Dashboard Settings to use the dashboard filter or choose a filter from the drop-down menu. |
| Target Build | Choose a build from the drop-down menu. Only the data in this build will display in the widget. |
| Compliance | Choose a compliance category from the drop-down menu. Compliance categories are driven by test configurations and their associated rule maps. See Rule Maps for additional information. |
| Severity | Choose a severity level from the drop-down menu. |
Actions
Click on a category in the widget to open the Violations by Compliance Category report.
...