CloudBees action: Scan with Checkmarx

Use this action to scan a Git repository with the Checkmarx scanner. Checkmarx can detect security vulnerabilities in open-source dependencies.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name	Data type	Required?	Description
`server-url`	String	Yes	The Checkmarx server URL.
`username`	String	Yes	The Checkmarx username.
`password`	String	Yes	The Checkmarx password.
`token`	String	Yes	The Checkmarx client secret.
`language`	String	No	The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs
Supported language	Input format
Go	`LANGUAGE_GO`
Java	`LANGUAGE_JAVA`
JavaScript	`LANGUAGE_JS`
Python	`LANGUAGE_PYTHON`

Usage example

In your YAML file, add:

      - name: Scan with Checkmarx
        uses: cloudbees-io/checkmarx-sast-scan-code@v1
        with:
          server-url: ${{ vars.CHECKMARX_SERVER_URL }}
          username: ${{ secrets.CHECKMARX_USERNAME }}
          password: ${{ secrets.CHECKMARX_PASSWORD }}
          token: ${{ secrets.CHECKMARX_CLIENT_SECRET }}
          language: "LANGUAGE_JS"▼