Checkmarx

Checkmarx is a static application security testing (SAST) tool that helps developers identify and fix security vulnerabilities in their software code.

Use the SEI Checkmarx SAST integration to integrate SEI with Checkmarx Static Analysis Solution (SAST).

Note: This SEI integration is under development. It provides limited integration support in its current state.

Configure the integration on cloud

1. Select Integrations under Settings.

2. Select Available Integrations, locate the Checkmarx SAST integration, and select Install.

3. Configure and save the integration:

   • Add the Checkmarx Instance URL

   • Add the checkmarx account Username

   • Enter your checkmarx account Password and click Next

   • Add a Name and Description for the integration

   • You can add Tags to identify the integration (optional)

Configure the integration using satellite

The steps for configuring the integration using satellite is similar to configuring the integration on cloud, with the exception of using satellite to communicate with the Checkmarx server.

Make sure to select the satellite integration checkbox while configuring the integration. Once you save the integration a satellite.yml file will be automatically generated and downloaded to your computer. Update it following the instructions here.

If you experience any issues while configuring the integration using the Ingestion Satellite, refer to the Ingestion Satellite Troubleshooting and FAQs.

Here’s a sample satellite.yml file

satellite:
  tenant: <ACCOUNT_NAME>
  api_key: <SEI_API_KEY>
  url: 'https://staging.propelo.ai'
integrations:
  - id: '<INTEGRATION_ID>'
    application: cxsast
    url: '<CHECKMARX_APP_URL>'
    username: checkmarx-test