Checkmarx

Overview

Checkmarx is a widely used application security testing (AST) solution that helps organizations identify and remediate security vulnerabilities in their software applications during the development and testing phases.

DevGrid supports an integration with the Checkmarx One product (docs).

This allows DevGrid to ingest your security vulnerability information, aggregate it across multiple tools, and surface it back to you in context.

Checkmarx Security Engines DevGrid Supports:

• Software composition analysis (SCA)
• Software composition analysis - Container (SCA - Container)
• Keeping Infrastructure as Code Secure (KICS)
• Static Application Security Testing (SAST)

Coming Soon - Support for:

• API Security Scanning
• Dynamic Application Security Testing (DAST)

Setup

1. Navigate to https://app.devgrid.io/settings/integrations, and select the Checkmarx Tile, click install!

2. Fill in the requested information
   1. Client Id: This is the checkmarx app, example: ast-app
   2. Token: This is your API Key (Checkmarx Docs on Creating API Key)
   3. Base URL: Which region of Checkmarx you are using, example: https://deu.iam.checkmarx.net/
   4. Tenant Name: This is the account name, for example in https://deu.iam.checkmarx.net/auth/admin/devgrid-nfr/console/ devgrid-nfr is the tenant name.

3. Click "install"
4. We will begin fetching your vulnerabilities on a schedule and you will start to see them within 24hrs.