You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,8 +19,6 @@
19
19
<h3align="center">AST AZURE PLUGIN</h3>
20
20
21
21
<palign="center">
22
-
The Checkmarx One (AST) Azure DevOps plugin enables you to integrate the full functionality of the Checkmarx One platform into your ADO pipelines. You can use this plugin to trigger Checkmarx One scans as part of your CI/CD integration.
23
-
<br/>
24
22
<a href="https://checkmarx.com/resource/documents/en/34965-68710-quick-start-guide---checkmarx-one-azure-devops-plugin.html"><strong>Explore the docs »</strong></a>
The Checkmarx One (AST) Azure DevOps plugin enables you to integrate the full functionality of the Checkmarx One platform into your ADO pipelines. You can use this plugin to trigger Checkmarx One scans as part of your CI/CD integration.
58
+
59
59
This plugin provides a wrapper around the [Checkmarx One CLI
60
60
Tool](https://checkmarx.com/resource/documents/en/34965-68620-checkmarx-one-cli-tool.html) which creates a zip archive from your source code repository and uploads it to Checkmarx One for scanning. This provides easy integration with ADO while enabling scan customization using the full functionality and flexibility of the CLI tool.
Copy file name to clipboardExpand all lines: overview.md
+36-6Lines changed: 36 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,14 +4,44 @@ Customers who are unable to whitelist this domain, can use an older version of t
4
4
5
5
### Overview
6
6
7
-
The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline. It provides a wrapper around the CxAST CLI Tool which creates a zip archive from your source code repository and uploads it to CxAST for scanning. This plugin provides easy integration with Azure while enabling scan customization using the full functionality and flexibility of the CLI tool.
7
+
The Checkmarx One (AST) Azure DevOps plugin enables you to integrate the full functionality of the Checkmarx One platform into your ADO pipelines. You can use this plugin to trigger Checkmarx One scans as part of your CI/CD integration.
8
+
9
+
10
+
This plugin provides a wrapper around the [Checkmarx One CLI
11
+
Tool](https://checkmarx.com/resource/documents/en/34965-68620-checkmarx-one-cli-tool.html) which creates a zip archive from your source code repository and uploads it to Checkmarx One for scanning. This provides easy integration with ADO while enabling scan customization using the full functionality and flexibility of the CLI tool.
12
+
13
+
> The plugin code can be found [here](https://github.com/Checkmarx/ast-azure-plugin).
8
14
9
15
### Main Features
10
-
- Automatically trigger CxSAST, CxSCA and KICS scans from Azure DevOps pipelines
11
-
- Supports adding a CxAST scan as a pre-configured task or as a YAML
12
-
- Supports use of CLI arguments to customize scan configuration
13
-
- Interface for viewing scan results summary and trends in the Azure environment
14
-
- Direct links from within Azure to detailed CxAST scan results and reports
16
+
17
+
- Configure ADO pipelines to automatically trigger scans running all Checkmarx One scanners: CxSAST, CxSCA, IaC Security, Container Security, API Security, Secret Detection and Repository Health (OSSF Scorecard).
18
+
19
+
- Supports adding a Checkmarx One scan as a pre-configured task or as a YAML
20
+
21
+
- Supports use of CLI arguments to customize scan configuration, enabling you to:
22
+
23
+
- Customize filters to specify which folders and files are scanned
24
+
25
+
- Apply preset query configurations
26
+
27
+
- Customize SCA scans using [SCA Resolver](https://checkmarx.com/resource/documents/en/34965-19196-checkmarx-sca-resolver.html)
28
+
29
+
- Set thresholds to break build
30
+
31
+
- Send requests via a proxy server
32
+
33
+
- Break build upon policy violation
34
+
35
+
- View scan results summary and trends in the ADO environment
36
+
37
+
- Direct links from within ADO to detailed Checkmarx One scan results
38
+
39
+
- Generate customized scan reports in various formats (JSON, HTML, PDF etc.)
40
+
41
+
- Generate SBOM reports (CycloneDX and SPDX)
42
+
43
+
- Supports Team Foundation Version Control (TFVC) based repos.
0 commit comments