CloudBees action: Scan with Checkmarx

Use this action to scan a Git repository with the Checkmarx scanner. Checkmarx can detect security vulnerabilities in open-source dependencies.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
server-url	String	Yes	The Checkmarx server URL.
username	String	Yes	The Checkmarx username.
password	String	Yes	The Checkmarx password.
token	String	Yes	The Checkmarx client secret.
language	String	No	The language of your Git repository code base. Refer to the supported languages below.

Supported languages

Table 2. Supported languages with inputs

Supported language	Input format
Go	LANGUAGE_GO
Java	LANGUAGE_JAVA
JavaScript	LANGUAGE_JS
Python	LANGUAGE_PYTHON

Usage example

In your YAML file, add:

      - name: Scan with Checkmarx
        uses: cloudbees-io/checkmarx-sast-scan-code@v1
        with:
          server-url: ${{ vars.CHECKMARX_SERVER_URL }}
          username: ${{ secrets.CHECKMARX_USERNAME }}
          password: ${{ secrets.CHECKMARX_PASSWORD }}
          token: ${{ secrets.CHECKMARX_CLIENT_SECRET }}
          language: "LANGUAGE_JS"

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.