> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexagon.com/llms.txt
> Use this file to discover all available pages before exploring further.

# runCxSASTScan

> Initiates an SAST scan using the given account credentials. Also automatically creates a project in Checkmarx if none exists with the given name. Inpu

Initiates an SAST scan using the given account credentials. Also automatically creates a project in Checkmarx if none exists with the given name.

# Inputs

<table><colgroup><col /><col /><col /><col /></colgroup><tbody><tr><th>**Input Name**</th><th>**Input Code**</th><th>**Required**</th><th>**Description**</th></tr><tr><td>Checkmarx Account Code</td><td>`FDCX_INP_ANALYSIS_TOOL_ACCOUNT_CODE`</td><td>Yes</td><td>The Checkmarx account with all required properties such as URL, Username and Password.</td></tr><tr><td>Checkmarx Project Name</td><td>`FDCX_INP_PROJECT_NAME`</td><td>Yes</td><td>The project name to use in Checkmarx. If no project exists with this name, one will be created.</td></tr><tr><td>Wait for Scan to Complete</td><td>`FDCX_INP_WAIT_SCAN_COMPLETE`</td><td>Yes</td><td>Whether to wait for the scan to complete or not. If set to false, you will need to use getSASTScanResults to see results.</td></tr><tr><td>Report Type</td><td>`FDCX_INP_REPORT_TYPE`</td><td>Yes</td><td>Type of report to be generated. Only applies if Wait for Completion is set to true.</td></tr><tr><td>Incremental Scan</td><td>`FDCX_INP_INCREMENTAL_SCAN`</td><td>Yes</td><td>Whether to perform an Incremental Scan.</td></tr><tr><td>Source Location</td><td>`FDCX_INP_SOURCE_CODE_LOCATION`</td><td>Yes</td><td>Where to derive the source code from. If upload is used, any contents in FD\_TEMP\_DIR will be uploaded to Checkmarx. If Git is selected it will use first configured git scm. Only token-based authentication is supported for git. If none is selected whatever is configured already on the project in Checkmarx will be used.</td></tr><tr><td>Exclude files</td><td>`FDCX_INP_EXCLUDE_FILES`</td><td>Yes</td><td>Files (including wildcards) to exclude from the scan.</td></tr><tr><td>Exclude folders</td><td>`FDCX_INP_EXCLUDE_FOLDERS`</td><td>Yes</td><td>Folders (including wildcards) to exclude from the scan.</td></tr><tr><td>Is Public</td><td>`FDCX_INP_IS_PUBLIC`</td><td>Yes</td><td>Whether the scan is public or not.</td></tr><tr><td>Force Scan</td><td>`FDCX_INP_FORCE_SCAN`</td><td>Yes</td><td>Whether to force a scan or not.</td></tr><tr><td>Team Name</td><td>`FDCX_INP_TEAM_NAME`</td><td>No</td><td>Team name to use to create project if none exists. If this value is not set, default team name on checkmarx account will be used instead.</td></tr></tbody></table>

# Outputs

<table><colgroup><col /><col /></colgroup><tbody><tr><th>**Output Name**</th><th>**Description**</th></tr><tr><td>`FDCX_OUT_SCAN_ID`</td><td>ID of the scan.</td></tr><tr><td>`FDCX_OUT_SCAN_RESULT_LINK`</td><td>Link to the scan results. Only applies if wait for scan is true.</td></tr><tr><td>`FDCX_OUT_HIGH_VULNERABILITIY_COUNT`</td><td>Number of High Vulnerabilities. Only applies if wait for scan is true.</td></tr><tr><td>`FDCX_OUT_MEDIUM_VULNERABILITIY_COUNT`</td><td>Number of Medium Vulnerabilities. Only applies if wait for scan is true.</td></tr><tr><td>`FDCX_OUT_LOW_VULNERABILITIY_COUNT`</td><td>Number of Low Vulnerabilities. Only applies if wait for scan is true.</td></tr></tbody></table>

# Artifacts

This operation doesn’t consume or produce any artifacts.

# Endpoint Selection

This operation delegates the selection to the workflow developer to determine.

# Endpoint Execution

This operation will execute on any one of the selected endpoints and will be random in the determination of which one.