CxDB Database Tables Relevant for Scan Configurations
The scan configurations are specified in the CxDB database. To better understand how scan configurations can be modified or created, the tables that are relevant to the scan configurations are described in this topic.
Notice
The tables shown below are representative of the actual tables, some of which are much larger in size, both in terms of the number of entries (rows) and fields (columns).
[CxDB].[Config].[CxEngineConfigurationKeysMeta]
This table contains the default values for engine configurations. The two keys that are shown below are relevant to scanning configurations.
Studying this table will help us understand the answer to the following question:
Given that the default scan configuration for a SAST 9.4.0 installation is the Improved Scan Flow, how many languages are scanned by default?
The following facts will help us answer the question:
If the MULTI_LANGUAGE_MODE key is set to 1, one primary language will be scanned. If the MULTI_LANGUAGE_MODE key is set to 2, all languages will be scanned.
If USE_LAZY_FLOW is set to true, the Improved Scan Flow algorithm is used.
Examining the table, we see that the default setting for a SAST 9.4.0 installation is that only one primary language is scanned, since the DefaultValue for the MULTI_LANGUAGE_MODE key is set to 1.
Id | KeyName | DefaultValue |
|---|---|---|
2 | MULTI_LANGUAGE_MODE | 1 |
43 | USE_LAZY_FLOW | true |
[CxDB].[Config].[CxEngineConfiguration]
This table contains the scan configuration options (a.k.a. configuration sets) that are displayed in the SAST Web Portal user interface, in the Configuration drop-down list on the General tab. When you create a project you can select one of these scan configurations or you can accept the default, which is displayed at the top of the drop-down list. The default scan configuration is specified in this table by setting the IsDefault value to True.
Id | Name | IsDefault |
|---|---|---|
1 | Default Configuration | False |
2 | Japanese (Shift-JIS) | False |
3 | Korean | False |
5 | Multi-language Scan | False |
6 | Improved Scan Flow | True |
[CxDB].[Config].[CxEngineConfigurationValues]
This table associates configuration options to engine configuration keys and specifies their values, which might differ from the default engine configuration values.
Studying this table will help us understand the answer to the following question:
Given that by default the MULTI_LANGUAGE_MODE key is set 1, so that only the one primary language is scanned, how does selecting the Multi-language Scan option, from the Configuration drop-down list, cause all languages to be scanned?
Id | ConfigurationId | ConfigurationKeyId | Value |
|---|---|---|---|
47 | 5 | 2 | 2 |
49 | 6 | 43 | true |
In the CxEngineConfigurationValues table below, ConfigurationId 5 is associated with ConfigurationKeyId 2. This links the Multi-language Scan option (Id 5) in the CxEngineConfiguration table to the MULTI_LANGUAGE_MODE key (Id 2) in the CxEngineConfigurationKeysMeta table.
As stated previously, if the MULTI_LANGUAGE_MODE key is set to 1, one primary language will be scanned. If the MULTI_LANGUAGE_MODE key is set to 2, all languages will be scanned.
In the CxEngineConfigurationValues table, the value 2 is specified for the MULTI_LANGUAGE_MODE key, overriding the DefaultValue 1 specified in the CxEngineConfigurationKeysMeta table.
The result is that when you select the Multi-language Scan option from the Configuration drop-down list in the SAST Web Portal user interface, all primary languages will be scanned in the project.
