Eclipse-based IDEs - Defects list – Kiuwan

To view the analysis's defects list, go to Window > Show View > Other > Kiuwan

Local defects list

The local defects list displays defects found during local analysis executed within your Eclipse.

Double-click on a defect to open the associated file in the Eclipse editor. The cursor will be placed on the affected line.

Right-click on a defect to inspect the Rule information of a defect to better understand it. (A browser will open to display the Rule Information page. You may be asked for your Kiuwan credentials.)

Vulnerabilities details (Source and Sink)

Security defects (i.e. vulnerabilities) are prefixed by a > icon.

Clicking the > icon will open details on the associated Source and Sink of the defect.

Just double-click on any of them to open source file and line.

Local Analysis Configuration

The Kiuwan IDE Plug-In will execute the analysis with the rules contained in the model associated with the mapped Kiuwan application.

But it also allows you to reduce the scope of the analysis to a subset of that model.

When you execute the local analysis on your Eclipse project, the number of defects can be quite large. If you are not going to work on all of them, you should consider reducing the analysis to let you concentrate on the most important subset of defects. The Kiuwan IDE Plug-In allows you to configure the local analysis to only report defects based on Priority, Characteristic, Language or even a subset of a file (based on file path substring)

This would allow you to concentrate on a specific set of rules or files, reducing the number of defects that appear in the list. Only those defects matching the filters will be displayed.

Note: Max number of defects
An important point is to set a limit for the number of defects displayed in the list.
It's set to 100 by default. You can increase such limit, but the performance of your Eclipse can be seriously damaged. Take care not to set that limit to a high number.
You can access the Local Analysis Configuration by clicking on the icon of the Local Defects list.

Note: All the options unchecked are equivalent to all checked.

Configuring Defects View

Regardless of you have configured the subset of defects of K4D analysis (see above), you can further reduce the defects view by defining additional filtering conditions.

The most important filter is Scope:

File option will only display defects of the selected file in the Eclipse source file editor
Project option will display the defects of the entire project

Additionally, you can define filters based on Priority, Characteristic, and Language.

Click the icon of Local Defects listDefine to view filters.

Note: All the unchecked options are equivalent to all the checked ones.

Server defects list

The server defects list displays defects of the application stored in the Kiuwan servers.

This utility allows developers to download defects found during the Kiuwan analysis of the application in a centralized environment.

For example, let's consider that at some predefined point in the application life cycle (for example, previously to committing a new release to a pre-production environment), the application is analyzed in a centralized environment.

This analysis finds some defects that must be fixed before deploying to the next phase. So, you, as a developer, will be notified that you must fix some blocking defects.

When you start working on it, you need to have full and easy access to those "server" defects.

Why do you need to have access to server defects? Because your Local defect list is likely different from the Server defect list:

Your current source code could be different from the source code of the server (you or others might have already modified that version)
The list of defects to be fixed will most probably be a subset of all defects found during the server analysis (more on this topic below)

In these cases, you will need to have access to server defects.

Source of Server defects list

Depending on your needs, the source of server defects could be different:

Last baseline analysis
- All the defects found during last complete application analysis (i.e., the Application Baseline)
Action plan
- Defects included within an Action Plan (you can select the plan from the app's list of available action plans)
Audit Delivery
- Defects that must be fixed so the Audit of the delivery can be successful (you can select the delivery among the list of executed deliveries)

Please, visit Kiuwan Life Cycle documentation for a full explanation of Baseline, Delivery, and Audit concepts.

Click the icon of the Server Defects list to access the Source of Server Defects.

Note: All the unchecked options are equivalent to all the checked ones.

Filter server defects to download based on Priority, characteristics, Language, or File Pattern, and configure the source of server defects.

Note: Max number of defects.
An important point is to set a limit for the number of defects displayed in the list.
By default, it's set to 100. You can increase such limit, but the performance of Eclipse can be seriously damaged. Do not set that limit to a high number.

Configuring Filters

Besides configuring source and filters, you can further reduce the server defect list by defining additional filtering conditions.

Click the icon of the Server Defects list to define view filters.

Note: All the unchecked options are equivalent to all the checked ones.

Additionally, you can define filters based on Priority, Characteristic, and Language.

Support and Troubleshooting

If you experience problems with the Kiuwan plugin for Eclipse, you can read Kiuwan Troubleshooting to find a solution, or if you prefer, you can collect troubleshooting information and send it to us.

Note: Support Information
Important information for troubleshooting is scattered across several log and configuration files.
To make this process easier for you, just go to Window > Preferences > Kiuwan > Support and press the Extract support data button.
Choose the folder where you want to save this information and submit to our technical support team the compressed file generated there.
Visit Contact Kiuwan Technical Support on how to contact us. We will address your problem as soon as possible.

Related to

Filter	Description
Scope	File = Only display defects of the selected file in the Eclipse source file editor Project = Display the defects of the entire project
Orphan defects	Display only those defects matching your current source code (defects with the associated local resource) those that don't (defects without associated local resource), or all of them.
Muted	Display a server defect that could have been muted (for example, because it's a false positive or because it's a so special condition that must not be fixed).
Life Cycle Status	To Review, Reviewed, or None When server defects are downloaded, you can filter defects based on their status.
Reviewed Locally	If you work on a to-review server defect, right-clicking on the defect you can "Mark as reviewed locally" that defect (see image below). Then, that defect will be marked as Reviewed locally