Skip to main content

Static Code Finding Data Model

The Static Code Finding data model represents a security finding identified using the Static Application Security Testing (SAST) methodology. It extends the Finding data model.

The following table details the default attributes of the Static Code Finding data model:

OrderAttribute NameAttribute TypeRelationship TypeRequired
1displayNameCalculated (Text)N/AYes
2typeReference (Static code finding definition)ISNo
3languagesText (Multivalued)N/ANo
4fileNameTextN/ANo
5methodTextN/ANo
6codeSnippetText AreaN/ANo
7assessmentReference (Assessment)DISCOVERED_INNo
8baseRiskScoreCalculated (Number)N/ANo
9riskFactorOffsetCalculated (Number)N/ANo
10riskScoreCalculated (Number)N/ANo
11riskRatingCalculated (Singe Choice)N/ANo
12ageInDaysCalculated (Number)N/ANo
13slaLevelCalculated (Text)N/ANo
14slaCalculated (Number)N/ANo
15dueDateCalculated (Date Time)N/ANo
16complianceStatusCalculated (Singe Choice)N/ANo
17daysToFixCalculated (Number)N/ANo
18confidenceSingle ChoiceN/ANo
19summaryTextN/ANo
20descriptionTextN/ANo
21severitySingle ChoiceN/ANo
22statusStatusN/ANo
23resultsTextN/ANo
24statusCategorySinge ChoiceN/ANo
25targetsReference (Asset)HASNo
26remediationSLANumberN/ANo
27firstFoundDate TimeN/ANo
28lastFoundDate TimeN/ANo
29lastFixedDate TimeN/ANo
30extendedDueDateDate TimeN/ANo
31riskOwnerCategoryN/ANo
32remediationOwnerCategoryN/ANo
33riskScoringModelRisk Scoring ModelN/ANo
34riskFactorsRisk FactorsN/ANo
35slaDefinitionSLAN/ANo
36uidTextN/AYes
37dataModelNameCalculated (Text)N/ANo
38sourceUidsText (Multivalued)N/ANo
39connectorCategoriesText (Multivalued)N/ANo
40connectorNamesText (Multivalued)N/ANo
41dataIntegrationTitlesText (Multivalued)N/ANo
42sourcesIconsSource data models iconsN/ANo
43nameTextN/ANo
44categoriesText (Multivalued)N/ANo
45flowStateTextN/ANo
46sourcesReference (Base model)SOURCED_FROMNo
47dateCreatedDate TimeN/ANo
48lastUpdatedDate TimeN/ANo
49createdByTextN/ANo
50updatedByTextN/ANo
FOOTNOTES
  • The Order column specifies the order of attributes being calculated in data computation.
  • The attribute names are used in Brinqa Query Language (BQL) queries and Brinqa Condition Language (BCL) predicates.
  • In the Type column, Calculated means that the value of the attribute is computed by executing a script. The text in the parentheses after Calculated denotes the type of the outcome.
  • In the Type column, Reference means that two data models are related. The name in the parentheses after Reference indicates the other data model.
  • The Relationship Type column only applies to the Reference type attributes. You can use the relationship type keyword in BQL queries.