This topic discusses the common issues that you may encounter while running API Security Testing on your application. From incomplete scan execution to API count disparity, each of the sections includes explanations and actionable fixes to help you troubleshoot quickly and effectively.
The scan appears incomplete, or the test execution percentage is lower than expected
Below is the list of common issues that may result in the above query, their cause, and resolution:
Aborted Scans
Cause — The scan may have been aborted manually from the Traceable platform or automatically due to a runner issue.
Resolution —
Navigate to the respective scan and check the Scan Status Reason column for the description.
Ensure that the runner instance is stable and has sufficient resources to execute the scan.
Scan Timeout
Cause — The scan has a high number of tests, but the Scan Timeout specified during Suite creation is insufficient. As a result, not all tests are executed.
Resolution — Modify the Suite details to increase the Scan Timeout value.
Unreachable APIs
Cause — Traceable evaluates tests within each scan as chains. If a test fails due to unreachable APIs, the dependent chain is skipped.
Resolution —
Ensure that all API endpoints configured as part of the scan are reachable. To check this, navigate to Testing → Suites, select the respective suite, Scans tab, and API Reachability tab for the respective scan.
Avoid using
localhost
or internal hosts in traces.
My scans are stuck in the Queued State
Below is the list of common issues that may result in the above query, their cause, and resolution:
All Runners are Busy
Cause — All the runners are busy executing scans.
Resolution — Allow the current scans to complete or add new runners to ensure uninterrupted scan execution without resource contention.
Idle Runners are not picking up the Scan
Cause — The runner may be inactive or may have been migrated to a different host, causing a change in its runner ID, which is tied to the host signature.
Resolution — Complete the following steps:
Navigate to Testing → Suites.
Select the respective suite where the scan is stuck.
Navigate to the Details tab, and click the Edit icon corresponding to the Suite Config section.
Remove the existing suite Schedule and add a new one.
Click Select specific runners, and from the list of runners, select a new one.
At the page’s bottom right corner, click Update.
My scan shows 0 generated tests
The probable causes and resolutions may vary depending on the traffic type configured in your suite:
Traffic Type | Cause, Check, and Resolution |
---|---|
Live Traffic |
|
Replay Traffic |
|
DAST |
|
|