Page tree

The technology documentation is no longer updated here, see

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 13 Next »

Summary: This page explains how to configure the Quality Standards Mapping extension for the CAST dashboards and CAST Report Generator.

Extension ID


In what situation should you install this extension?

This extension is required in the following situations:

  • If you would like to view CISQ, OWASP, CWE and other quality standards data in the CAST dashboards (Health, Engineering and Security) in dedicated custom tiles, you should install this extension.
  • If you would like to use the official CISQ, OWASP and CWE templates provided with the CAST Report Generator.
  • If you would like to create custom templates that uses CISQ, OWASP, CWE and other quality standards data in the CAST Report Generator.

How does it work?

The extension provides a set of tags that identify the relevant quality standards data in the CAST AIP snapshot data:

  • When using the CAST Report Generator, these tags can be used in report templates (supported templates are delivered with tags pre-defined, however you can also use the tags in your own custom templates)
  • When using the CAST dashboards, custom tiles can be configured using these tags - note that some tiles using some tags are provided "out-of-the-box" in the CAST Security Dashboard.

Available tags

Tags provided by this extension are listed in the Standards section of


CAST AIP≥ 8.3.x(tick)-

CAST AIP for Security

≥ 1.0(tick)-
CAST Dashboards≥ 1.6.0(tick)

Supported dashboards:

  • CAST Health Dashboard
  • CAST Engineering Dashboard
  • CAST Security Dashboard
CAST Report Generator≥ 1.7.0(tick)-

Download and installation instructions

Each step is detailed below.

Step 1 - Download and installation

Note: please note that Steps 3 and 4 in Install an extension are NOT relevant for the Quality Standards extension. Please skip them.

Step 2 - Add the tile configuration to your deployed Dashboard

  • This step is not required when using the extension with CAST Report Generator templates.
  • Some tiles using some tags are provided "out-of-the-box" in the CAST Security Dashboard.

CAST Health Dashboard

See Health Dashboard tile management.

CAST Engineering / Security Dashboard

See Engineering Dashboard tile management.

Step 3 - Upload snapshot to Measurement schema

If you are configuring custom tiles using Quality Standards tags in the Health Dashboard, you will need to upload the most recent snapshot to the Measurement schema in order that the new tags are transferred (the Quality Standards Mapping extension (i.e. extensions in general) are only installed to the Analysis and Dashboard schemas). To do so you can use one of these methods:

AIP Console

Run the Consolidate Snapshot action on the most recent snapshot:

Click to enlarge

CAST Management Studio

Use the Upload action on the most recent snapshot (Application editor > Execute tab):

AAD-consolidate toolUse the AAD-consolidate tool to perform an upload. See Using the GUI and CLI tools for Health Dashboard.

Step 4 - Reload the cache or log out / log in

To ensure that the most up-to-date information is available in the dashboards, ensure you either reload the cache or alternatively, log out and log back in.

What results can you expect?

CAST dashboards

To view the new tiles, refresh your browser. If you do not see the tiles, you may need to empty your browser cache. The tiles will be displayed as follows (example for the CISQ-Reliability tag in the CAST Health Dashboard):

Clicking the tile will drill down as follows:

Application level (click to enlarge):

Portfolio level (click to enlarge):

CAST Report Generator

You can use any predefined standards templates requiring the Quality Mapping extension to generate reports or use any of the available tags in your own custom templates.

  • No labels