{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":19893,"path":"impact/healthscan-definitions-may-store.md","title":null,"bundle":null,"doc_type":null,"release":null,"body":"---\ntitle: Healthscan definitions updates: May 2025 store\ndescription: Some HealthScan definitions are deprecated or updated between releases.\nlocale: en-US\ncanonical_url: https://www.servicenow.com/docs/r/australia/impact/healthscan-definitions-may-store.html\nrelease: australia\ntopic_type: reference\nlast_updated: \"2026-10-09\"\nreading_time_minutes: 8\nbreadcrumb: [HealthScan definitions, HealthScan tech KPIs, HealthScan, Impact Delivery Instance reference, Impact reference, Impact]\n---\n\n# Healthscan definitions updates: May 2025 store\n\nSome HealthScan definitions are deprecated or updated between releases.\n\n## New definitions\n\nThe following definitions have been added for the May 2025 release to improve performance, reduce false positives, and meet the latest coding practices. Some of these definitions will have a positive or negative impact on your customer instance scores.\n\nDue to process and technical constraints, a comprehensive impact analysis for the overall score impact could not be fully conducted for customer instances. As a result, there may be potential impact score drops that have not been identified or addressed.\n\n|Number|Short description|Rating|Category|Update description|\n|------|-----------------|------|--------|------------------|\n|HSD0022569|Service Operations Workspace ITSM Applications is installed and active|Discuss|User Experience​|New definition that checks if the plugin sn\\_sow\\_itsm\\_cont is installed and activated​|\n|HSD0024649|Reports with very long execution times​|Discuss|User Experience​|New definition to identify long running reports per DT thresholds​|\n\n## Updated definitions\n\nThe following definitions have been updated for the May 2025 release to improve performance, reduce false positives, and meet the latest coding practices. Some of these definitions will have a positive or negative impact on your customer instance scores.\n\nDue to process and technical constraints, a comprehensive impact analysis for the overall score impact could not be fully conducted for customer instances. As a result, there may be potential impact score drops that have not been identified or addressed.\n\n\n
\n\nNumber\n\n\n\nShort description\n\n\n\nRating\n\n\n\nCategory\n\n\n\nUpdate description\n\n
\n\nHSD0001011\n\n\n\nCommon slow loading forms in the last 30 Days\n\n\n\nDiscuss\n\n\n\nPerformance\n\n\n\n- New client threshold is 1 second \\(1000ms\\)​\n- New total response threshold is 5 seconds \\(5000ms\\)​\n\n
\n\nHSD0001106\n\n\n\nApplications should use Source Control\n\n\n\nDiscuss\n\n\n\nManageability\n\n\n\n- New version runs in sub-prod only.​ ​\n- Added better error handling.​\n- Added manual statistic​\n\n
\n\nHSD0001107\n\n\n\nJavaScript Mode is not set correctly on application​\n\n\n\nDiscuss\n\n\n\nManageability\n\n\n\nNew version makes clear distinction that globally scoped apps should be on ES5and scoped apps should be on ES12​\n\n
\n\nHSD0001116\n\n\n\nClient Scripts should not be defined against the Global table​\n\n\n\nRecommend\n\n\n\nPerformance\n\n\n\nChanged documentation URL to: https://developer.servicenow.com/dev.do\\#!/guides/latest/now-platform/tpb-guide/client\\_scripting\\_technical\\_best\\_practices\\#avoid-global-client-scripts\n\n
\n\nHSD0001164\n\n\n\nUse state, not Incident State or Problem State​\n\n\n\nRecommend\n\n\n\nManageability\n\n\n\n- Condition filtered only for global scope incident and problem tables​\n- Overall code standardization​\n\n
\n\nHSD0001174\n\n\n\nScripted Web Services writing data directly​\n\n\n\nRecommend\n\n\n\nSecurity\n\n\n\n- Removed matching requirement for semicolons​\n- Improved Regex to a single pattern\n- Removed repeated use of Regex patterns\n- Migrated from String.match to Pattern.test​\n- Add updateMultiple\\(\\) to pattern​\n- Added 1K limit to findings\n- Forced Statistic even on failures\n\n​\n\n
\n\nHSD0001193\n\n\n\nUse the condition field in Business Rules​\n\n\n\nDiscuss\n\n\n\nManageability\n\n\n\n- Simplified scriptingAmended query to allow\n- Findings on insert, update, delete and query\n- Business Rules​Corrected RegExp Pattern​\n- Clarified verbiage\n- Added condition to ignore \"Auto Business rules\" generated by the system​\n\n
\n\nHSD0001205\n\n\n\nWidgets not used in any dashboards​\n\n\n\nDiscuss\n\n\n\nManageability\n\n\n\n- New version ensures that each finding flags custom widget that it is truly unrelated to a dashboard​\n- Added defensive scripting​\n- Added statistic​\n\n
\n\nHSD0001207\n\n\n\nForm layout whitespace: make sure layout split does not have large empty areas because only one side contains fields.​\n\n\n\nRecommend\n\n\n\nUser Experience​\n\n\n\n- Updated Findings to be against sys\\_ui\\_sections containing the elements\n- Updated script to confirm these\n- Sections were updated by customer​\n- Updated Findings display to contain the view names for these forms​\n\n
\n\nHSD0001275\n\n\n\nScripts should not contain hard-coded IDs​\n\n\n\nRecommend\n\n\n\nManageability\n\n\n\nExcluded any tables starting with itfm\\_​\n\n
\n\nHSD0001281\n\n\n\ngetMessage\\(\\) called in Client Script without preloading message key​\n\n\n\nRecommend\n\n\n\nManageability\n\n\n\n- Condensed a couple regex into single pattern​\n- Removed some string manipulation and replaced with regex capturing​\n- Now detecting messages in double quotes as well​\n\n
\n\nHSD0001344\n\n\n\nMinimize the number of options in a choice field​\n\n\n\nDiscuss\n\n\n\nUser Experience​\n\n\n\n- Updated the script to correctly check for the presence of sys\\_choice\\_set updates in sys\\_update\\_xml​\n- Updated the messaging in the Findings to show the Language in question to the customer​\n- Confirmed that the sys\\_language record is also active​\n\n
\n\nHSD0001378\n\n\n\nReports not run for 3 months​\n\n\n\nDiscuss\n\n\n\nManageability​\n\n\n\nUpdated the query to filter out reports that are no longer active​\n\n
\n\nHSD0001385\n\n\n\nCheck for automatic indicators with no scores collected​\n\n\n\nRecommend\n\n\n\nManageability​\n\n\n\n- Updated script to confirm that baseline / provided indicators have active m2m records to collection jobs which are also active​\n- Adjusted some variable names and return values to be more intuitive\n- Updated short description and recommendation to be more clear​\n\n
\n\nHSD0001398\n\n\n\nScript Includes with duplicate names​\n\n\n\nAct\n\n\n\nManageability​\n\n\n\nAn additional Base version check is added to trigger a finding for only non OOB records.​\n\n
\n\nHSD0001467\n\n\n\nDuplicate foundation/core data found​\n\n\n\nAct\n\n\n\nManageability​\n\n\n\n- Updated statistics and findings to show the duplicate count per foundation table​\n- Findings url gives an encoded url for next experience instances showing a descending order and for the non next experience providing a non encoded url \\(with out specifying order\\)\n\n
\n\nHSD0001507\n\n\n\nScheduled jobs should run as dedicated integration user accounts rather than as default system​\n\n\n\nAct\n\n\n\nSecurity\n\n\n\n- Short description: Scheduled jobs should run as dedicated integration user accounts rather than as default system​\n- Excluded sys\\_flow\\_trigger\\_auto\\_script​\n\n
\n\nHSD0001533\n\n\n\nThe default \"system\" user preference for \"rows per page\" should be set to 50 or less​\n\n\n\nRecommend\n\n\n\nPerformance\n\n\n\nRecommendation: Set the default rows per page global default property to max 50. Consider also setting the max allowable values in glide.ui.per\\_page property to 10,25,50. To change specific user's preferences back from larger values to lower ones, consider using a scheduled job to reset them after 7-14 days back to lower values unless the user continues to require large sets of data.​\n\n
\n\nHSD0001561\n\n\n\nClient Scripts should check for isLoading and return​\n\n\n\nDiscuss\n\n\n\nPerformance\n\n\n\n- Modified the regular expression for robustness​\n- Filters out base version \\(OOB\\) client scripts​\n- Elaborated the description​\n\n
\n\nHSD0001627\n\n\n\nDo not query audit log in your custom integrations and code.​\n\n\n\nRecommend\n\n\n\nPerformance\n\n\n\nAdded ua\\_scripted\\_defn to the excluded tables list​\n\n
\n\nHSD0001695\n\n\n\nModification of State Choice set \\(install\\_status\\) on alm\\_asset table.​\n\n\n\nAct\n\n\n\nUpgradeability\n\n\n\n- Altered code from using hardcoded list of states to checking for sys\\_update\\_xml from the customer marking the sys\\_choice\\_set as replace on upgrade == false\n- Updated the short description to \"Modification of State Choice set \\(install\\_status\\) on alm\\_assettable.\" Where it was previously \"Modification of State\"​ ​\n\n
\n\nHSD0001755\n\n\n\nModification of State Choice set \\(state\\) on resource\\_plan table.​\n\n\n\nRecommend\n\n\n\nUpgradeability\n\n\n\nAltered code from using hardcoded list of states to checking for sys\\_update\\_xml from the customer marking the sys\\_choice\\_set as replace on upgrade == false​\n\n
\n\nHSD0002020\n\n\n\nAvoid long module titles​\n\n\n\nDiscuss\n\n\n\nUser Experience​\n\n\n\n- Updated documentation url​ Updated code to ignore module titles containing \"deprecated\"\n- Added defensive scripting​\n- Added statistic​\n- Made code a little more efficient via more reliance on the database​\n- Measurably improved performance​\n\n
\n\nHSD0002089\n\n\n\nBreakdown element filter should have valid conditions​\n\n\n\nAct\n\n\n\nManageability\n\n\n\n- Fixed issues with empty field name\n- General code cleanup\n- Now ignoring RLQ queries​\n\n
\n\nHSD0002130\n\n\n\nValid To dates set to reasonable values​\n\n\n\nRecommend\n\n\n\nUser Experience​\n\n\n\n- Updated definition to check for latest default\n- Valid to date = '2100-01-01'​\n- Updated description to Valid to date = '2100-01-01'​\n- Updated to relevant documentation url​\n- Added defensive scripting\n\n​ ​\n\n
\n\nHSD0002151\n\n\n\nUse AngularJS services rather than window objects​\n\n\n\nAct\n\n\n\nPerformance\n\n\n\n- Removed accidental inclusion of versioned HSD number in the short description\n- ​Added manual exception for the following line of code from cloned widgets:​\n\nvar dateFormat = window.NOW.dateFormat;​\n\n\n
\n\nHSD0002342\n\n\n\nEach Policy Statement should have a valid attestation template.\n\n\n\nDiscuss\n\n\n\nManageability\n\n\n\n- Description updated\n- Documentation link adjusted​ Implemented 1k threshold on Findings​\n- Resolved HSINQ0006628, HSINQ0005842, HSINQ0006736​\n\n
\n\nHSD0002464\n\n\n\nInactive Knowledge Author​\n\n\n\nAct\n\n\n\nUser Experience​\n\n\n\n- Adjusted the script to correctly return the link to the records indicated in the Finding\n- Also adjusted script to only return a Finding where this is 1 or more KB Articles with a non-active Author reference​\n\n
\n\nHSD0002602\n\n\n\nList Layout with more than one List Element on the same position​\n\n\n\nAct\n\n\n\nManageability\n\n\n\nAn additional Base version check is added to trigger a finding for only non OOB records.​\n\n
\n\nHSD0002737\n\n\n\nUI Actions displayed as a button should be short and precise​\n\n\n\nDiscuss\n\n\n\nUser Experience​\n\n\n\n- Updated documentation url\n- Elaborated the recommendation a little more\n\n
\n\nHSD0002808\n\n\n\nScripts without description​\n\n\n\nRecommend​\n\n\n\nManageability\n\n\n\n- Definition now queries only\n- Client Scripts and Script Includes.\n- Definition flags customized record versions only \\(no base versions\\).​\n- Redundant code was eliminated.​\n- Defensive coding was added.​\n- Tests showed performance improvement with 50% run time reduction​\n- Code is easier to read​\n\n
\n\nHSD0003076\n\n\n\nBasic authentication credentials on SOAP Message definition​\n\n\n\nRecommend\n\n\n\nManageability\n\n\n\n- If a SOAP Message Definition is utilizing a Basic Auth Profile, it is no longer reported​\n- Added a standard try/catch to capture any potential errors​\n- Added a summary Statistic​\n\n
\n\nHSD0003094\n\n\n\nEnable Email Spam Scoring and Filtering​\n\n\n\nRecommend\n\n\n\nSecurity\n\n\n\nUpdated documentation link to point to the same content in the newer syntax​\n\n
\n\nHSD0003220\n\n\n\nAgent Workspace should be used for Incident Management​\n\n\n\nRecommend\n\n\n\nUser Experience​\n\n\n\nThe definition is deprecated and is replaced by HSD0022569 \\(Service Operations Workspace ITSM\\).\n\n
\n\nHSD0003238\n\n\n\nCannot Implement before Planned start date​\n\n\n\nRecommend\n\n\n\nManageability​\n\n\n\n- Fixed Query to look for future dates only​\n- Updated documentation\n- URL​ Limiting to 1000 records\n\n
\n\nHSD0003995\n\n\n\nChange Management - CAB Manager role and CAB Management group​\n\n\n\nRecommend\n\n\n\nManageability​\n\n\n\n- Finding now pointing to the active CAB group without active members\n- Finding also created when there is no Active CAB groups​\n- Finds more than one group with this scenario​\n\n
\n\nHSD0004447\n\n\n\nEnforce Strict User Image Upload​\n\n\n\nRecommend\n\n\n\nSecurity\n\n\n\nUpdated the docs link to point to same content in the newer syntax​\n\n
\n\nHSD0007988\n\n\n\nTechnical Service Offerings with Parent Technical Service Reference​\n\n\n\nRecommend\n\n\n\nUser Experience​\n\n\n\n- Fixed the calculation formula that was resulting in NaN​\n- General code cleanup​\n\n
\n\nHSD0008013\n\n\n\nCheck for scheduled imports running at the same time.​\n\n\n\nAct\n\n\n\nPerformance\n\n\n\nRemoved a couple \\|\\| conditions that would never match to simplify the code.​\n\n
\n\nHSD0008070\n\n\n\nSynchronous outbound calls should be carefully used in Business Rules and UI Actions.​\n\n\n\nAct\n\n\n\nPerformance\n\n\n\n- Removed the 2nd sentence in the Recommendation field​\n- Removed incorrect query condition incorrect query condition 'scriptNOTLIKEsetMIDServer'​\n- Replaced the finding overrides and added line numbering to the output​\n- Replaced ScriptUtils.removeCommentsfunction call use with new more performant and more accurate removeComments function​\n\n
\n\nHSD0009985\n\n\n\nLast family release upgrade occurred over 1 year ago​\n\n\n\nAct\n\n\n\nUpgradeability\n\n\n\nChecking glide.war property instead​\n\n
\n\nHSD0012244\n\n\n\nHW Product Model with Useful Life​\n\n\n\nDiscuss\n\n\n\nManageability\n\n\n\n- Updated Recommendation\n- Updated Documentation URL​\n- Limited results to 100​\n\n
\n\nHSD0013510\n\n\n\nValidate Remote Host​\n\n\n\nRecommend​\n\n\n\nSecurity\n\n\n\nUpdated description to state that if the setting is set to False vs \"if not set to true\"​\n\n
\n\nHSD0013559\n\n\n\nDo Not Use Demo Certificates for Active SAML Configurations​\n\n\n\nDiscuss\n\n\n\nSecurity\n\n\n\n- Corrected logic problem​\n- Added try/catch​ ​\n- Added forced statistic​\n\n
\n\nHSD0015207\n\n\n\nLimit Attachment Size in Training and Prediction Flows​\n\n\n\nRecommend\n\n\n\nSecurity\n\n\n\nCorrected system property and code​\n\n
\n\nHSD0015246\n\n\n\nEnforce Credential Alias Usage​\n\n\n\nDiscuss\n\n\n\nSecurity\n\n\n\n- Optimized remote script to take only\n- Validated MID servers into account. \\(at least 1\\)\n- Added try / catch​\n- Added Statistic​\n- Altered documentation link to be more specific to this issue​\n\n
**Parent Topic:**[HealthScan definitions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/impact/healthscan-definitions.md)\n\n"}}