CloudBees action: Scan with Checkmarx

1 minute read

Use this action to scan a Git repository with the Checkmarx scanner. Checkmarx can detect security vulnerabilities in open-source dependencies.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name Data type Required? Description

server-url

String

Yes

The Checkmarx server URL.

username

String

Yes

The Checkmarx username.

password

String

Yes

The Checkmarx password.

token

String

Yes

The Checkmarx client secret.

language

String

No

The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs
Supported language Input format

Go

LANGUAGE_GO

Java

LANGUAGE_JAVA

JavaScript

LANGUAGE_JS

Python

LANGUAGE_PYTHON

Usage example

In your YAML file, add:

      - name: Scan with Checkmarx
        uses: cloudbees-io/checkmarx-sast-scan-code@v1
        with:
          server-url: ${{ vars.CHECKMARX_SERVER_URL }}
          username: ${{ secrets.CHECKMARX_USERNAME }}
          password: ${{ secrets.CHECKMARX_PASSWORD }}
          token: ${{ secrets.CHECKMARX_CLIENT_SECRET }}
          language: "LANGUAGE_JS"