Skip to main content

Checkmarx One Integrations

Overview

Checkmarx One is a robust platform that supports full integration into your SDLC. We support the following types of integrations:

  • SCM Integrations - We support integration with most of the popular SCM platforms. You can set up SCM integrations using the web application by “Importing” a project from your SCM. You can activate automated scanning of your source code whenever the project is updated. Checkmarx One listens for commit events and uses a webhook to trigger Checkmarx scans when a push, or a pull request occurs. See Checkmarx One SCM Integrations

  • Feedback Integrations - Send scan results directly to the relevant parties through your bug tracking and team collaboration tools. See Feedback Apps

  • CI/CD Integrations - We provide specialized plugins to enable seamless integration of Checkmarx One with many popular CI/CD platforms. This enables you to trigger customized scans as part of your CI/CD pipeline. In addition, we support integration with other CI/CD platforms using our CLI Tool. See Checkmarx One CI/CD Integrations

  • IDE Integrations - We provide specialized plugins that enable you to import Checkmarx One results into your favorite IDE tools. This makes it easy to identify the vulnerable code in your project and triage the scan results. See Checkmarx One IDE Plugins

Integrations Screen

Clicking on the Integrations icon Integrations.png in the main navigation opens a screen that enables you to set up and manage your Checkmarx One integrations. The following sections explain the content of the three tabs on this screen.

Integration Tab

This is the default view that opens when you open the Integrations screen. The left-side pane, Integrate an App, gives links to begin setting up a new Feedback App integration. The right-side pane, Available External Plugins, shows a list of external plugins with the relevant links.

Integrate an App

Feedback Apps enable users to integrate Checkmarx One with external tools such as a bug tracking services (Jira and GitHub Issues) as well as team collaboration tools (Microsoft Teams and Slack). This enables automated exporting of scan results to the relevant parties through a convenient channel. You can create a new Feedback App integration on this page. The available integrations are shown in two sections Alerts and Bug Tracking. For a full explanation of how to configure Feedback Apps, see Feedback Apps.

Image_113.png

External Plugins

The External Plugins pane shows an informational page listing all of our available plugins and supported integrations. For each plugin for which it is relevant, links are given to download the plugin from Marketplace, view comprehensive Documentation and access the Source code in GitHub. You can filter by category (IDE, CLI & CI/CD, Vulnerability management).

Image_114.png

Inventory Tab

This tab shows a list of all of the Feedback Apps and Feedback App Profiles that have been configured in your account. On this screen, you can edit or delete an existing configuration. You can also set up a new Feedback App by clicking on the +Create App button. For a full explanation of how to configure Feedback Apps, see Feedback Apps.

Image_855.png

Project Migration Tab

This tab enables you to migrate (convert) existing Checkmarx One Manual projects to Code Repository Integration projects. The procedures for executing the migration are explained in Project Migration.

Image_856.png