Skip to content

Useful tools and Examples made by Checkmarx Professional Services

Notifications You must be signed in to change notification settings

scott-cx/CxUtils

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Checkmarx Professional Services Utilities

This is a curated set of utilities maintained by Checkmarx Professional Services and made available for public consumption. This is a collection of scripts, tutorials, source code, and anything else that may be useful for use in the field by Checkmarx employees or customers.

The List

Project Description
CheckPotentialFoldersFilesExclusions For purposes of Project configuration tuning at large scale for all projects scanned, it was created this Powershell script that goes over the CxSrc folder and find potential Folders/Files exclusions in order to: Reduce LOC, Reduce Time Scanning and Reduce FPs rate.
cx-batch-scan PowerShell script that uses CxFlow to scan a comma-separated list of GitHub repositories in a batch mode.
cx-flow-ado Sample CxFlow Docker image for Azure DevOps Pipelines
cx-jenkins-lib Jenkins Pipeline shared library example
cx-sast-scans-analysis Powershell utility to pull scan data / build metrics from a CxSAST instance
cx-sca-search Tool to search for a given open-source library name in the results of prior Checkmarx SCA scans. This search tool complements the search capability in the current SCA results User Interface, which limits searches to the current scan.
CxFlowDemoInstance Scripting to create a full path demonstration environment for Cx-Flow on your local machine in under 10 minutes.
cxgit Powershell utility designed to help answer the question "I have XXX repositories, how many CxProjects do I need"?
CxPythonTools Checkmarx Python tools
cxsast_engine_cleanup Batch file designed to cleanup scans & logs from CxSAST engine servers
cxsast_mass_testscan This repository has scripts for scanning using CxFlow or CxCLI. The scripts ingest a text file of public git repos.
CxSASTRestApiExample This powershell template demonstrates how to use the Checkmarx SAST REST API endpoints using token authentication.
CxSeverityOverride A python based utility that would allow the user to change the severity of the query, package type of the query and/or add the query to multiple presets at the same time.
CxSOAP-API-Examples Checkmarx SOAP API Examples (8.X versions)
data-retention Controls (Starts & Stops) data retention.  Given the URL of a specific Checkmarx web interface, starts a data retention by deleting either all scans within a specified date range or all but the last X scans for each project.
engineering-health-check Powershell scripts that run the odata query used for Engineering Health Checks
installAndRun-CxConsole Powershell script to auto-download and execute the Checkmarx CLI
JenkinsDemoInstance Using Docker desktop, create an instance of Jenkins running under selected versions of the JDK. Standalone and master/agent configurations are supported. Settings are persisted in a local directory so that configurations are not lost when the Docker container is stopped.
multi-repo-whitelist-scan Script to clone multiple git repos, remove unrecognized file types, and scan as one project using the CxCLI from a linux bash shell
perfmon This script makes it easy to get up and running with Perfmon to monitor your Checkmarx infrastructure
svn-cx-runner Utility that iterates through SVN repo, downloads Maven dependencies and creates Checkmarx projects.
TruffleHogCxQL A port of the TruffleHog secrets detector. It finds potential secrets through Regular Expression matches and High Entropy string detection.
user-type-migration A process to generate SQL Statements to migrate from one user type to another (e.g. LDAP to SAML)
WindowsNoRDP A script that will configured the ability to log into a server's desktop using VNC over HTTP. Primarily made to facilitate access to Checkmarx training VMs, this is useful in situations where RDP port 3389 access to a training instance may be blocked by a corporate firewall.
LinuxEngineInstall A script that will download the linux engine(currently from 9.3 installer) update the server.env with values provided by user, start docker and run the engine on Amazon Linux.

About

Useful tools and Examples made by Checkmarx Professional Services

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 67.2%
  • PowerShell 29.4%
  • Shell 1.1%
  • Groovy 0.9%
  • Java 0.6%
  • PHP 0.6%
  • Other 0.2%