Checkmarx One ServiceNow Plugin Change Log

Branch info has been mapped to the Project Branch field on the AVIT table.

Primary Branch info is mapped to the Source Additional Info field on the Discovered Application table with Application ID.

If Sync Only Primary Branch is enabled from the configuration page, only the projects, scans, and vulnerabilities performed for the primary branch will be imported into the respective integrations and tables.

For SAST scanner findings, the Source AVIT of the AVIT table has been changed into a combination of the Similarity ID and the Result Hash from CxOne to receive the unique AVITs.

Washington DC support has been added to this version.

Bug Fixes

The Project tags information from CxOne will be mapped to the Source APM ID of the Discovered Application Table of SNOW.

If a scanID has been deleted, the plugin will bypass it without causing any failure.

Added new DevOps Integration which will permit users with the DevOps Change Velocity license to view third-party scan summaries from Security Operations in DevOps.

Bug fixes

Bug fixes

Addition of new Scanner type IaC from Checkmarx One on the Configuration Page , which will bring up IaC scans and results

Addition of a new field  List of Project IDs on the Configuration Page to filter out only entered Projects

Addition of a SAST Delta result API, which compares the last two scans from the given Start Date in Integration Run and presents the latest changes.

SNOW Vancouver compatibility

The Scan Summary Name column will have sca- or sast- as prefixes and scanId and Last scan date in the AVIT table.

Addition of Application ID from Checkmarx One to Snow, In the Application Release table, it is mapped to the Source additional Info column, and in the Application Vulnerability Item Table, it is mapped to the Source additional Info column

Added OWSAP Top 10 and SANS 25 information for SAST vulnerabilities in OWASP and Short Description column of the Application Vulnerability Entry Table (sn_vul_app_vul_entry.LIST)