Documentation Nexus IQ Server 1.17

In order to evaluate an application, you need to have created at least one organization and one application, as well as created or imported at least one policy at either the organization or application level. You will also need to make sure you have the proper permissions to view report information for the application you wish to evaluate.

While evaluations can be initiated from various tools (e.g. Nexus Pro+), the quickest way to get started is to perform an evaluation via the Nexus IQ Server.

This will generate a report for your application quite easily, and is a great way to create a quick baseline of your application’s health.

As mentioned previously, before you can evaluate an application, you will need to make sure you have:

With the above complete, you are ready to evaluate an application via the Nexus IQ Server.

If your evaluation completed successfully, a report will be generated for the application.

The log output of the command execution will provide a summary as well as a link to the produced results similar to

[INFO] Policy Action: Warning
[INFO] Summary of policy violations: 4 critical, 85 severe, 46 moderate
[INFO] The detailed report can be viewed online
at http://localhost:8070/ui/links/application/my-app/report/95c4c14e

This report is available on the Nexus IQ Server in the Reports section. If you kept our defaults, the report will be listed under the Build Stage. So, what are you waiting for? You should see something similar to the results displayed in Figure 7.12, “Violations Report after Scan”