Archer XML Report Fields

This table describes the fields in the Archer XML report.

Archer XML Field	Definition
`any_scan_due_date`	When you must next run a scan, as dictated by the associated policy.
`app_name`	Name of the application.
`archer_app_name`	An optional name to match with the application name in Archer.
`app_origin`	Ultimate origin of the application, such as open source.
`assurance_level` Deprecated	The level of assurance for the application. Veracode has deprecated assurance level and replaced it with business criticality .
`business_owner`	First and last name of the person responsible for the application.
`business_unit`	Department or group associated with the application.
`custom0`	Custom metadata field 1.
`custom1`	Custom metadata field 2.
`custom2`	Custom metadata field 3.
`custom3`	Custom metadata field 4.
`custom4`	Custom metadata field 5.
`custom5`	Custom metadata field 6.
`custom6`	Custom metadata field 7.
`custom7`	Custom metadata field 8.
`custom8`	Custom metadata field 9.
`custom9`	Custom metadata field 10.
`custom10`	Custom metadata field 11.
`custom11`	Custom metadata field 12.
`custom12`	Custom metadata field 13.
`custom13`	Custom metadata field 14.
`custom14`	Custom metadata field 15.
`custom15`	Custom metadata field 16.
`custom16`	Custom metadata field 17.
`custom17`	Custom metadata field 18.
`custom18`	Custom metadata field 19.
`custom19`	Custom metadata field 20.
`custom20`	Custom metadata field 21.
`custom21`	Custom metadata field 22.
`custom22`	Custom metadata field 23.
`custom23`	Custom metadata field 24.
`custom24`	Custom metadata field 25.
`dynamic_score`	Veracode security quality score of the most recent Dynamic Analysis scan of this application.
`flaws`	Parent field of the collection of ArcherRecords that describe flaws.
`flaws\app_name`	Name of the application.
`flaws\capecid`	Category ID for the flaw.
`flaws\categoryid`	ID number of flaw category.
`flaws\categoryname`	Name of the flaw category.
`flaws\cia_impact`	CIA value for the calculated CVSS score.
`flaws\count`	Number of times this flaw occurs in this scan.
`flaws\cwe_description`	Definition of the Common Weakness Enumeration (CWE).
`flaws\cweid`	ID number for the Common Weakness Enumeration (CWE).
`flaws\date_first_occurrence`	Date of the scan when this flaw first occurred.
`flaws\exploit_desc`	Description of the flaw discovered during Manual Penetration Testing.
`flaws\exploitdifficulty`	Level of vulnerability for the calculated CVSS score.
`flaws\exploitLevel`	Calculated level of exploitability after static scan.
`flaws\flaw_description`	Description of the flaw.
`flaws\flaw_issue_id`	Unique issue ID number of the flaw.
`flaws\functionprototype`	Class/function information for flaws in binaries that do not have debug symbols.
`flaws\functionrelativelocation`	Relative location of flaws in the class file of binaries that do not have debug symbols.
`flaws\is_latest_build`	Boolean value that indicates if this report is for the most recent scan of the application.
`flaws\line`	Line location of flaws in binaries that do not have debug symbols.
`flaws\module`	Calling module where the flaw is located.
`flaws\note`	Exploitability level: `Very Unlikely` to `Very Likely`
`flaws\pcirelated`	Boolean value that indicates if the flaw is PCI-related.
`flaws\platform`	Platform metadata from the application profile.
`flaws\published_date`	Date of the publication date of the scan results.
`flaws\remediation_desc`	Description of how to remediate flaws discovered during Manual Penetration Testing.
`flaws\remediation_status`	Remediation status: `New`, `Open`, `Re-Open`, `Fixed`
`flaws\remediationeffort`	Level of difficulty of effort to remediate the flaw with values ranging from `1` to `5`, where `5` is the most difficult.
`flaws\scope`	Approximate classpath for flaws in binaries that do not have debug symbols.
`flaws\severity`	Severity of the flaw. Value ranges from `1`-`5`, where `5` is the most severe.
`flaws\severity_desc`	Flaw severity: `5` is Very High (VH), `4` is High, `3` is Medium, `2` is Low, `1` is Very Low (VL)
`flaws\sourcefile`	Name of the source code file that contains the flaw.
`flaws\sourcefilepath`	Filepath of the source code file that contains the flaw.
`flaws\type`	Flaw type.
`flaws\url`	For Dynamic Analysis, the URL where the flaw is located.
`flaws\version`	Version of the application that contains the flaw.
`generation_date`	Date of results report generation.
`grace_period_expired`	Parameter to indicate if flaws have existed in the most recent scan of this application for longer than the acceptable grace period.
`last_update_date`	Date of publication of the most recent scan of this application.
`lifecycle_stage`	Lifecycle stage of this application, such as external or beta testing.
`manual_score`	Security quality score for the most recently published results of Manual Penetration Testing of the application.
`mitigated_rating` Deprecated	Score in the previous Veracode scoring system.
`modules`	Parent field of the collection of ArcherRecords that describe the scans.
`modules\analysis_type`	Type of scan: `static`, `dynamic`, `manual`
`modules\architecture`	Architecture on which the application was built or compiled.
`modules\compiler`	Name and version of the compiler of the module.
`modules\module`	Name of the module.
`modules\os`	Name of the operating system for which the module is targeted.
`modules\target_url`	Target URL that the Dynamic Analysis scan is to analyze.
`planned_deployment_date`	Specified deployment date of the application, if provided.
`platform`	Platform used for the application scan.
`policy_compliance_status`	Description of the policy compliance of the application: `Calculating`, `Did Not Pass`, `Conditional Pass`, `Pass`
`policy_name`	Name of the policy assigned to the application.
`policy_rules_passed`	Boolean value that indicates if the application passed the policy rules.
`policy_version`	Policy version.
`rating` Deprecated	Score in the previous Veracode scoring system.
`scan_overdue`	Boolean value that indicates the length of time since the last scan of this application is unacceptable according to the associated policy.
`static_score`	Security Quality Score for the most recent static scan of this application.
`submitted_date`	Submission date of the most recent static scan of this application.
`tags`	Comma-separated list of metadata tags associated with this application.
`teams`	Teams assigned to the application.
`version`	Version of this application.