Inputs
Input Name | Input Code | Required | Description |
|---|---|---|---|
Checkmarx Account Code |
| Yes | The Checkmarx account with all required properties such as URL, Username and Password. |
Checkmarx Project Name |
| Yes | The project name to use in Checkmarx. If no project exists with this name, one will be created. |
Wait for Scan to Complete |
| Yes | Whether to wait for the scan to complete or not. If set to false, you will need to use getSASTScanResults to see results. |
Report Type |
| Yes | Type of report to be generated. Only applies if Wait for Completion is set to true. |
Incremental Scan |
| Yes | Whether to perform an Incremental Scan. |
Source Location |
| Yes | Where to derive the source code from. If upload is used, any contents in FD_TEMP_DIR will be uploaded to Checkmarx. If Git is selected it will use first configured git scm. Only token-based authentication is supported for git. If none is selected whatever is configured already on the project in Checkmarx will be used. |
Exclude files |
| Yes | Files (including wildcards) to exclude from the scan. |
Exclude folders |
| Yes | Folders (including wildcards) to exclude from the scan. |
Is Public |
| Yes | Whether the scan is public or not. |
Force Scan |
| Yes | Whether to force a scan or not. |
Team Name |
| No | Team name to use to create project if none exists. If this value is not set, default team name on checkmarx account will be used instead. |
Outputs
Output Name | Description |
|---|---|
| ID of the scan. |
| Link to the scan results. Only applies if wait for scan is true. |
| Number of High Vulnerabilities. Only applies if wait for scan is true. |
| Number of Medium Vulnerabilities. Only applies if wait for scan is true. |
| Number of Low Vulnerabilities. Only applies if wait for scan is true. |