Skip to main content

Configuring Proxies for Checkmarx SCA Agent

Checkmarx SCA Agent supports communication through a proxy server to Checkmarx SCA Cloud. If you are using a proxy, configure the network settings for the proxy. If the proxy replaces the Checkmarx SCA Cloud trusted certificate, add the proxy’s root certificate.

Configuring Network Settings

To enable your proxy to access the Internet, specify the address of the proxy for HTTPS and HTTP. You can use the proxy’s IP address or the DNS name.

Notice

If the proxy uses load balancing through DNS, use the DNS name.

To configure the proxy’s address:

  1. Open the .env file of the SCA-AGENT.

  2. In the Network Settings section, for HTTPS_PROXY and HTTP_PROXY enter the proxy’s IP address or DNS name, and uncomment the line.

  3. If you used the DNS name, then for DNS enter the domain’s DNS server, and uncomment the line.

  4. Uncomment the NO_PROXY line.

The following is an example of the configuration for using a DNS name .

########################## Network Settings ##########################
# Uncomment the line below if you need a proxy to access the internet
HTTPS_PROXY=http://my-proxy
HTTP_PROXY=http://my-proxy
# On some platforms, you may need to uncomment this line to prevent the internal communication routing to proxy
NO_PROXY=127.0.0.1,localhost,172.0.0.0/8,minio,source-resolver,reverse-proxy,uploads,cx-flow,scan-runner
DNS=8.8.8.8

Adding Trusted Certificate

If you are using a proxy that replaces the Checkmarx SCA Cloud trusted certificate, add the proxy’s root certificate.

To add the proxy’s certificate:

In the SCA-AGENT configuration, add a copy of the proxy’s root certificate into the volumes > trusted-certs folder.