This extension has been superseded by the ISO-5055 Index extension, which uses the same ID: com.castsoftware.omg-ascqm-index. This documentation is no longer maintained.
Extension ID
com.castsoftware.omg-ascqm-index
Description
ASCQM, Automated Source Code Quality Measures, is an OMG standard that is published by the CISQ Consortium.
This extension will compute Quality Software Characteristic Measures as Business Criteria and Quality Measure Elements as Technical Criteria. All CAST rules that are tagged with a OMG-ASCQM related tag will contribute to the various Quality Measure Elements / Quality Software Characteristic Measures thereby allowing specific grades and rule violations to be reported.
Compatibility
Product | Release | Supported |
---|---|---|
CAST AIP | ≥ 8.3.24 | |
CAST Engineering Dashboard | ≥ 1.5 | |
CAST Health Dashboard | ≥ 1.17 | |
CAST Security Dashboard | ≥ 1.18 |
OMG-ASCQM version
1.0 (January 2020) |
Download and installation instructions
Configuration requirements
Generate a snapshot
A new snapshot must be generated (after the extension is installed) before results can be viewed. If you do not immediately see changes in the dashboard, please consider restarting Apache Tomcat and/or emptying your browser cache.
Engineering Dashboard
Tiles
Out of the box, no tiles will be provided to display data for this extension, however it is possible to create tiles manually to display Violation data directly from this extension using the Industry Standard/s tile plugin in v. ≥ 1.18 of the Engineering Dashboard. See Engineering Dashboard tile management for more information
Clicking on the tile navigates to Risk investigation view and the specified Industry Standard will be selected in the Health Factor table.
Set filterHealthFactor option to false (only required in Engineering Dashboard ≤ 1.17)
Health Dashboard
Out of the box, no tiles will be provided to display data for this extension, however it is possible to create tiles manually to display Grade, Compliance, and Violation data directly from this extension using the Industry Standard/s tile plugin in v. ≥ 1.17 of the Health Dashboard. See Health Dashboard tile management for more information. Clicking on any of these tiles will display a list of the rules that have been tagged with the specified standard as provided by the extension. Compliance percentage is also displayed in a "bubble".
Example for cmp.json
Configuration to create a "gauge" tile at portfolio level (multi-app level) to show a OMG-ASCQM-Index Business Criterion tile:
{ "id": 1234, "plugin": "IndustryStandards", "color": "black", "parameters": { "type": "OMG-ASCQM", "title": "OMG-ASCQM-Index", "widget": "gauge", "industryStandard": { "id": "1061000", "mode": "grade", "format": "0.00", "description": "OMG-ASCQM-Index in grade format" } } }
Example for app.json
Configuration to create a "number of violations" tile at application level (single app level) to show a OMG-ASCQM-Maintainability Business Criterion tile:
{ "id": 1236, "plugin": "IndustryStandard", "color": "orange", "parameters": { "type": "OMG-ASCQM", "title": "OMG-ASCQM-Maintainability", "industryStandard": { "id": "1061001", "mode": "violations", "format": "0,000", "description": "OMG-ASCQM-Maintainability in number of violations format" } } }
Security Dashboard
Out of the box, no tiles will be provided to display data for this extension, however it is possible to create tiles manually to display Violation data using the Industry Standard/s tile plugin in v. ≥ 1.18 of the Security Dashboard. The tile configuration is identical to that described for the Engineering Dashboard, see Engineering Dashboard tile management for more information:
Clicking on the tile navigates to Security Dashboard - Risk Investigation and the specified Industry Standard will be selected in the Health Factor table.
What results can you expect?
Once the analysis/snapshot generation has completed, you can view the results in the dashboards:
Assessment Model
Various Business and Technical Criteria will be added by the extension:
OMG-ASCQM-Index
1061000 | OMG-ASCQM-Index | Business Criterion |
---|
OMG-ASCQM-Maintainability
1061001 | OMG-ASCQM-Maintainability |
---|---|
1061046 | CWE-407 |
1061056 | CWE-478 |
1061057 | CWE-480 |
1061058 | CWE-484 |
1061061 | CWE-561 |
1061065 | CWE-570 |
1061066 | CWE-571 |
1061088 | CWE-783 |
1061105 | CWE-1041 |
1061108 | CWE-1045 |
1061110 | CWE-1047 |
1061111 | CWE-1048 |
1061114 | CWE-1051 |
1061115 | CWE-1052 |
1061116 | CWE-1054 |
1061117 | CWE-1055 |
1061121 | CWE-1062 |
1061122 | CWE-1064 |
1061128 | CWE-1074 |
1061129 | CWE-1075 |
1061131 | CWE-1079 |
1061132 | CWE-1080 |
1061135 | CWE-1084 |
1061136 | CWE-1085 |
1061137 | CWE-1086 |
1061138 | CWE-1087 |
1061141 | CWE-1090 |
1061143 | CWE-1093 |
1061145 | CWE-1095 |
OMG-ASCQM-Performance-Efficiency
1061002 | OMG-ASCQM-Performance-Efficiency |
---|---|
1061044 | CWE-401 |
1061045 | CWE-404 |
1061049 | CWE-424 |
1061085 | CWE-772 |
1061086 | CWE-775 |
1061106 | CWE-1042 |
1061107 | CWE-1043 |
1061109 | CWE-1046 |
1061112 | CWE-1049 |
1061113 | CWE-1050 |
1061118 | CWE-1057 |
1061120 | CWE-1060 |
1061124 | CWE-1067 |
1061126 | CWE-1072 |
1061127 | CWE-1073 |
1061140 | CWE-1089 |
1061142 | CWE-1091 |
1061144 | CWE-1094 |
OMG-ASCQM-Reliability
1061003 | OMG-ASCQM-Reliability |
---|---|
1061021 | CWE-119 |
1061022 | CWE-120 |
1061023 | CWE-123 |
1061024 | CWE-125 |
1061026 | CWE-130 |
1061027 | CWE-131 |
1061029 | CWE-170 |
1061030 | CWE-194 |
1061031 | CWE-195 |
1061032 | CWE-196 |
1061033 | CWE-197 |
1061034 | CWE-248 |
1061035 | CWE-252 |
1061038 | CWE-366 |
1061039 | CWE-369 |
1061040 | CWE-390 |
1061041 | CWE-391 |
1061042 | CWE-392 |
1061043 | CWE-394 |
1061044 | CWE-401 |
1061045 | CWE-404 |
1061047 | CWE-415 |
1061048 | CWE-416 |
1061049 | CWE-424 |
1061051 | CWE-456 |
1061053 | CWE-459 |
1061054 | CWE-476 |
1061057 | CWE-480 |
1061058 | CWE-484 |
1061060 | CWE-543 |
1061062 | CWE-562 |
1061064 | CWE-567 |
1061067 | CWE-595 |
1061068 | CWE-597 |
1061074 | CWE-662 |
1061076 | CWE-667 |
1061077 | CWE-672 |
1061078 | CWE-681 |
1061079 | CWE-682 |
1061080 | CWE-703 |
1061081 | CWE-704 |
1061083 | CWE-758 |
1061084 | CWE-764 |
1061085 | CWE-772 |
1061086 | CWE-775 |
1061089 | CWE-786 |
1061090 | CWE-787 |
1061091 | CWE-788 |
1061094 | CWE-805 |
1061095 | CWE-820 |
1061096 | CWE-821 |
1061097 | CWE-822 |
1061098 | CWE-823 |
1061099 | CWE-824 |
1061100 | CWE-825 |
1061101 | CWE-833 |
1061102 | CWE-835 |
1061103 | CWE-908 |
1061108 | CWE-1045 |
1061114 | CWE-1051 |
1061119 | CWE-1058 |
1061123 | CWE-1066 |
1061125 | CWE-1070 |
1061130 | CWE-1077 |
1061131 | CWE-1079 |
1061133 | CWE-1082 |
1061134 | CWE-1083 |
1061138 | CWE-1087 |
1061139 | CWE-1088 |
1061146 | CWE-1096 |
1061147 | CWE-1097 |
1061148 | CWE-1098 |
OMG-ASCQM-Security
1061004 | OMG-ASCQM-Security |
---|---|
1061010 | CWE-22 |
1061011 | CWE-23 |
1061012 | CWE-36 |
1061013 | CWE-77 |
1061014 | CWE-78 |
1061015 | CWE-79 |
1061016 | CWE-88 |
1061017 | CWE-89 |
1061018 | CWE-90 |
1061019 | CWE-91 |
1061020 | CWE-99 |
1061021 | CWE-119 |
1061022 | CWE-120 |
1061023 | CWE-123 |
1061024 | CWE-125 |
1061025 | CWE-129 |
1061026 | CWE-130 |
1061027 | CWE-131 |
1061028 | CWE-134 |
1061030 | CWE-194 |
1061031 | CWE-195 |
1061032 | CWE-196 |
1061033 | CWE-197 |
1061035 | CWE-252 |
1061036 | CWE-259 |
1061037 | CWE-321 |
1061038 | CWE-366 |
1061039 | CWE-369 |
1061044 | CWE-401 |
1061045 | CWE-404 |
1061049 | CWE-424 |
1061050 | CWE-434 |
1061051 | CWE-456 |
1061052 | CWE-457 |
1061055 | CWE-477 |
1061057 | CWE-480 |
1061059 | CWE-502 |
1061060 | CWE-543 |
1061063 | CWE-564 |
1061064 | CWE-567 |
1061065 | CWE-570 |
1061066 | CWE-571 |
1061069 | CWE-606 |
1061070 | CWE-611 |
1061071 | CWE-624 |
1061072 | CWE-643 |
1061073 | CWE-652 |
1061074 | CWE-662 |
1061075 | CWE-665 |
1061076 | CWE-667 |
1061077 | CWE-672 |
1061078 | CWE-681 |
1061079 | CWE-682 |
1061082 | CWE-732 |
1061085 | CWE-772 |
1061086 | CWE-775 |
1061087 | CWE-778 |
1061088 | CWE-783 |
1061089 | CWE-786 |
1061090 | CWE-787 |
1061091 | CWE-788 |
1061092 | CWE-789 |
1061093 | CWE-798 |
1061094 | CWE-805 |
1061095 | CWE-820 |
1061096 | CWE-821 |
1061097 | CWE-822 |
1061098 | CWE-823 |
1061099 | CWE-824 |
1061100 | CWE-825 |
1061102 | CWE-835 |
1061104 | CWE-917 |
Click to enlarge
Engineering Dashboard
≥ 1.18.0
In ≥ 1.18.0 out of the box, results are displayed in a specific interface - click the OMG ASCQM Assessment Model option to view the results:
Click to enlarge
≤ 1.17.0
Health Dashboard
Out of the box, no results are provided. Tiles can be configured manually as described above.
Security Dashboard
Out of the box, results are displayed in a specific interface - click the OMG ASCQM Assessment Model option (after clicking the Risk Investigation tile in the Application home page) to view the results:
Only the OMG-ASCQM-Security Business Criterion will be available (due to the default filtering implemented in the Security Dashboard):
Click to enlarge
RestAPI
The RestAPI can be used to query both the Dashboard (AED) and Measurement (AAD) schemas for results, for example: